以内容为中心的信息中心网络是面向计算存储通信一体化的未来网络的解决方案之一，近年来受到了越来越多的关注。然而新的技术引入了新的安全问题，这些问题直接关系到信息中心网络的发展与部署，亟待解决。本课题旨在针对其中的访问控制和数据有效性保护问题展开研究：1）提出内容可控访问和网络资源保护相结合的一体化访问控制机制，创新地提出基于挑战-应答的边缘路由器执行的鉴权机制；2）提出基于用户使用量的可信审计，并建立相应的计费模型；3）提出内容有效性保护机制，抵御针对ICN在线缓存的缓存污染攻击。4）构建仿真、局域网实验和跨区域实验相结合的实验验证体系，建立基于规约化的形式化证明方法。以上四点相辅相成，构成了一个闭环的有机整体。本项目的研究将对信息中心网络安全体系的建立提供理论依据和实验基础，对于计算存储通信一体化的未来网络长远、健康的发展具有重要的意义。

Information Centric Networking (ICN) is one of the solutions for computing, caching and communication integrated future Internet, and has received more and more attention in recent years. However, the new technology introduces new security issues to be solved, which directly affects the development and deployment of ICN. This project aims to mainly study the access control and data validity protection in ICN: 1) We propose an integrated access control mechanism combining content access control and network resource protection, and we innovatively propose a challenge-response-based Authentication mechanism implemented on edge routers; 2) We propose a trusted usage-based auditing and charging mechanism; 3) We propose a content validity protection mechanism to defend against cache pollution attacks against in-network caching in ICN; 4) Construct an experimental verification system combining simulation, local experiment and real cross-region experiment, and also establish a formal theoretical proof method based on security deduction. The above four aspects complement each other and constitute a closed-loop organic whole. The research of this project will provide theoretical basis and experimental basis for the establishment of ICN security protection system, which is of great significance for the long-term and healthy development of computing, caching and communication integrated future networks.