Jun Kurihara
ABSTRACT
Content-centric networking (CCN) realizes the efficient communication by leveraging content name-based routing and named data objects. However, the explicitly-given names of content makes the censorship easily enforceable, and hence the censorship circumvention is a challenging problem in CCN. For the problem, this paper introduces an anonymization framework to circumvent the censorship under the novel concept of consumer-driven access control to interest names and opportunities of cache recycling at network nodes. Our framework leverages an arbitrary type of encryption-based access control and enables us to recycle the CCN-specific content cache at intermediate nodes in path of the anonymized communication. Furthermore, by combining CCNx manifests and nameless objects with our anonymization framework, we can maximize the benefit of CCN-specific in-network caching simultaneously with minimizing the computational overhead and circumventing the censorship. We claim this is the first anonymization framework for censorship circumvention, which is designed by the CCN-specific approach.
- 1.Akamai Technologies, https://www.akamai.com/.Google Scholar
- 2.CCNx, http://ccnx.org/.Google Scholar
- 3.NDN, http://named-data.net/.Google Scholar
- 4.B. Ahlgren, C. Dannewitz, C. Imbrenda, D. Kutscher, and B. Ohlman, "A survey of information-centric networking," IEEE Commun. Mag., 50(7), pp. 26–36, 2012.Google ScholarCross Ref
- 5.J. Bethencourt, A. Sahai, and B. Waters, "Ciphertext-policy attribute-based encryption," In Proc. IEEE SP 2007, pp. 321–334, Oakland, CA, USA, May 2007. Google ScholarDigital Library
- 6.D. Boneh, C. Gentry, and B. Waters, "Collusion resistant broadcast encryption with short ciphertexts and private keys," In Proc. CRYPTO 2005, pp. 1–19, Santa Barbara, CA, USA, Aug. 2005. Google ScholarDigital Library
- 7.S. DiBenedetto, P. Gasti, G. Tsudik, and E. Uzun, "ANDaNA: Anonymous named data networking application," In Proc. NDSS 2012, San Diego, CA, USA, Feb. 2012.Google Scholar
- 8.C. Ghali, M. A. Schlosberg, G. Tsudik, and C. A. Wood, "Interest-based access control for content centric networks," In Proc. ACM ICN 2015, pp. 147–156, San Francisco, CA, USA, Sept.-Oct. 2015. Google ScholarDigital Library
- 9.A. Ghodsi, S. Shenker, and T. Koponen, "Information-centric networking: seeing the forest for the trees," In Proc. ACM HotNets-X, pp. 1–6, Cambridge, MA, USA, Nov. 2011. Google ScholarDigital Library
- 10.V. Goyal, O. Pandey, A. Sahai, and B. Waters, "Attribute-based encryption for fine-grained access control of encrypted data," In Proc. ACM CCS 2006, pp. 89–98, Alexandria, VA, USA, Oct.-Nov. 2006. Google ScholarDigital Library
- 11.M. Ion, J. Zhang, and E. M. Schooler, "Toward content-centric privacy in ICN: Attribute-based encryption and routing," In Proc. 3rd ACM SIGCOMM Workshop on Information-Centric Networking (ICN 2013), pp. 39–40, Hong Kong, China, Aug. 2013. Google ScholarDigital Library
- 12.V. Jacobson, D. K. Smetters, J. D. Thornton, M. F. Plass, N. H. Briggs, and R. L. Braynard, "Networking named content," In Proc. ACM CoNEXT 2009, pp. 1–12, Rome, Italy, Dec. 2009. Google ScholarDigital Library
- 13.J. Kurihara, E. Uzun, and C. A. Wood, "An encryption-based access control framework for content-centric networking," In Proc. IFIP Networking 2015, pp. 1–9, Toulouse, France, May 2015.Google ScholarCross Ref
- 14.S. Misra, R. Tourani, and N. E. Majd, "Secure content delivery in information-centric networks: Design, implementation, and analyses," In Proc. 3rd ACM SIGCOMM Workshop on Information-Centric Networking (ICN 2013), pp. 73–78, Hong Kong, China, Aug. 2013. Google ScholarDigital Library
- 15.S. Misra, R. Tourani, F. Natividad, T. Mick, N. E. Majd, and H. Huang, "AccConF: An access control framework for leveraging in-network cached data in ICNs," arXiv:1603.03501, Mar. 2016.Google Scholar
- 16.M. Mosko, "Nameless objects," IRTF ICNRG, Jan. 2016.Google Scholar
- 17.M. Mosko, C. Tschudin, and C. A. Wood, "Manifest proposal variations," IRTF ICNRG, Oct. 2015.Google Scholar
- 18.M. Naor and B. Pinkas, "Efficient trace and revoke schemes," In Proc. FC 2000, pp. 1–20, Anguilla, British West Indies, Feb. 2000. Google ScholarDigital Library
- 19.S. C. Seo, T. Kim, and M. Jang, "A privacy-preserving approach in content centric networking," In Proc. IEEE CCNC 2014, pp. 866–871, Las Vegas, NV, USA, Jan. 2014.Google Scholar
- 20.D. K. Smetters, P. Golle, and J. D. Thornton, "CCNx access control specifications," PARC, July 2010.Google Scholar
- 21.I. Solis and G. Scott, "CCN 1.x tutorial," In ACM ICN 2014, Paris, France, Sept. 2014.Google Scholar
- 22.R. Tourani, T. Mick, S. Misra, and G. Panwar, "Security, privacy, and access control in information-centric networking: A survey," arXiv:1603.03409, Mar. 2016.Google Scholar
- 23.R. Tourani, S. Misra, J. Kliewer, S. Ortegel, and T. Mick, "Catch me if you can: A practical framework to evade censorship in information-centric networks," In Proc. ACM ICN 2015, pp. 167–176, San Francisco, CA, USA, Sept.–Oct. 2015. Google ScholarDigital Library
- 24.W.-G. Tzeng and Z.-J. Tzeng, "A public-key traitor tracing scheme with revocation using dynamic shares," In Proc. PKC 2001, pp. 207–224, Cheju Island, Korea, Feb. 2001. Google ScholarDigital Library
- 25.C. A. Wood and E. Uzun, "Flexible end-to-end content security in CCN," In Proc. IEEE CCNC 2014, pp. 858–865, Las Vegas, NV, USA, Jan. 2014.Google Scholar
Index Terms
- A Consumer-Driven Access Control Approach to Censorship Circumvention in Content-Centric Networking
Recommendations
Interest-Based Access Control for Content Centric Networks
ACM-ICN '15: Proceedings of the 2nd ACM Conference on Information-Centric NetworkingContent-Centric Networking (CCN) is an emerging network architecture designed to overcome limitations of the current IP-based Internet. One of the fundamental tenets of CCN is that content is named and addressable. Consumers request content by issuing ...
Secure content delivery in information-centric networks: design, implementation, and analyses
ICN '13: Proceedings of the 3rd ACM SIGCOMM workshop on Information-centric networkingIn this paper, we propose a novel secure content delivery framework, for an information-centric network, which will enable content providers (e.g., Netflix and Youtube) to securely disseminate their content to legitimate users via content distribution ...
Content discovery for information-centric networking
The information-centric networking (ICN) adopts a content name as a network identifier and utilizes in-network storages to cache the contents. With the name-based routing and content caching, ICN can provide substantial benefits such as faster content ...
Comments