Efficient security credential management for named data networking

摘要

As a promising future internet architecture, named data networking (NDN) shifts the focus from where the data is to what content it carries. In NDN, the communication is driven by the consumer requesting data with specified name, and is secured by the producer signing the data and optionally encrypting the content. Therefore, during NDN communications, consumers may need to fetch digital certificates to verify data's signature. And a chain of certificates may be involved in verifying some signatures. Maintaining those certificates efficiently, especially when the number of certificates to maintain is large, is challenging. This paper proposes a novel mechanism to store certificates efficiently, based on NDN certificate naming convention. According to our experimental results, the proposed approach gains a reduction of memory consumption around 80%, while providing faster lookup speed.