Publish/subscribe scheme for content centric MANETs
Publish/subscribe scheme for content centric MANETs
复制标题
DOI：
10.2298/csis150320045g
复制
发表时间：
2016
期刊：
影响因子：
--
通讯作者：
Xian Guo;Tao Feng;Cheng Chen;Tong Liu
中科院分区：
文献类型：
--
作者：
Xian Guo;Tao Feng;Cheng Chen;Tong Liu
允许内容生产者的数据被缓存在以内容为中心的MANET（CCMANET）中的任何地方。该方案将数据与数据源解耦，使得传统的端-端认证传输在CCMANET中无法实现。因此，如何保证内容只有合法用户才能发布或订阅是一个挑战。本文首先设计了一种椭圆曲线上的Yaksha系统（EC-Yaksha），然后提出了一种基于EC-Yaksha的CCMANET安全内容发布/订阅系统（ECY-CPS）。在ECY-CPS中，EC-Yaksha服务器管理网络用户的加入或离开，并仅向合法用户分发“许可证”，用于内容发布或订阅。这样，就保证了只有合法用户才能将内容发布到网络或访问网络中缓存的内容。此外，使用许可证可以有效地防止常见的攻击，如利益泛滥和内容污染等。最后，我们证明了安全性能的ECY-CPS在PCL和我们的系统和相关的解决方案之间进行了简单的比较。
It is allowed that data of the content producer is cached anywhere in Content Centric MANET (CCMANET). This scheme decoupling of data from the data source make traditional end-end authentication transmission unavailable in CCMANET. So, it is a challenge how to ensure content publishing or subscribing only by legitimate users. In this paper, we firstly design a new Yaksha system on Elliptic Curve (EC-Yaksha), and then a secure Content Publish/Subscribe System based on EC-Yaksha (ECY-CPS) for CCMANET is proposed. In ECY-CPS, EC-Yaksha server manages joining or leaving of network users and distributes “license” only to legitimate user for content publishing or subscribing. Such, it is guaranteed that only the legitimate users can publish content to network or access content cached in network. In addition, using of the license can efficiently defend common attacks such as the interest flooding and the content pollution etc. Finally, we prove security properties of ECY-CPS in PCL and make a simple comparison between our system and the related solution.