ICN密文汇聚与访问的权限控制

ICN作为新兴的去中心化网络，可广泛应用于物联网、车联网等具体环境，是未来网络之一，然而，目前ICN安全基础设施不足以支撑各种应用环境。同时，ICN的安全基础设施又面临各种挑战。本研究针对ICN应用于物联网、车联网、社交网络等具体环境下面临网络拓扑动态高速变化、间断性连接、终端资源受限、低时延要求、发布者位置隐私保护、订阅行为隐私保护等需求，解决汇聚与访问权限控制机制背后的三个核心科学问题：1)密文汇聚与访问的安全保护与“一键透明”之间的矛盾统一；2)支持权限撤销的安全性、灵活性与高效性的矛盾统一；3)灵活性控制在密文汇聚与访问权限支持的抽象建模与方法探索。在综合考虑密文机密性、动态权限管理的前向安全和后向安全、抗共谋攻击等安全限制的情况下，探索直接对密文进行汇聚与访问的一系列权限控制机制，为ICN这一未来网络能够广泛应用提供权限控制方面的理论、方法和技术支撑。

As a rising decentralized future network，ICN can be deployed in IoT, VANET etc.. However, its security infrastructure cannot enough support all kinds of application environments, and it faces with various challenges. There are various scenarios, such as dynamic and rapidly changes of network topology, Intermittent connection, limited source terminals, low-latency demand, privacy protection on publisher's location and subscription, when ICN is applied in IoT, VANET or social network. Three core scientific problems behind of aggregating and access authorization control will be solved: 1) the contradiction and unity between security protection of ciphertext aggregating/access and one-key transparent. 2) the contradiction and unity between security, scalability and efficiency of privilege revocation. 3) the abstraction, modeling and exploring methods on scalability authorization control over ciphertext aggregating and access. This research will explore a series of mechanisms of privilege control over aggregating and access on ciphertext. These items are considered: ciphertext confidentiality, forward security and backward security on dynamic privilege management, and resistance of collusion, etc. These results will provide the widespread deployment of ICN with theory, method and technology supports on authorization control.