A Lightweight Identity-Based Signature Scheme for Mitigation of Content Poisoning Attack in Named Data Networking With Internet of Things

• Published in: IEEE access Vol. 8; pp. 98910 - 98928
• Main Authors: Ullah, Syed Sajid, Ullah, Insaf, Khattak, Hizbullah, Khan, Muhammad Asghar, Adnan, Muhammad, Hussain, Saddam, Amin, Noor Ul, Khattak, Muazzam A. Khan
• Format: Journal Article
• Language: English
• Published: Piscataway IEEE 2020; The Institute of Electrical and Electronics Engineers, Inc. (IEEE)
• Subjects: Caching; Computer architecture; Computer systems; Content poisoning attack; Cryptography; Curves; Elliptic curve cryptography; identity-based signature; Internet of Things; named data networking (NDN); Poisoning; Routing protocols; Security
• ISSN: 2169-3536; 2169-3536
• DOI: 10.1109/ACCESS.2020.2995080

Named Data Networking (NDN) is one of the future envisioned networking paradigm used to provide fast and efficient content dissemination with interest-based content retrieval, name-based routing and in-network content caching. On the one hand, this new breed of future Internet architecture is becoming a key technology for data dissemination in the IoT networks; on the other hand, NDN suffers from new challenges in terms of data security. Among them, a content poisoning attack is the most common data security challenge. The aim of this attack is to inject poisoned content with an invalid signature to the network. Therefore, to prevent NDN against possible content poisoning attack, a signature of the contents is appended to each data packet for verifications. In this paper, we propose an identity-based signature scheme for IoT-based NDN networks, with a special emphasis on content integrity and authenticity. The proposed scheme is based on the concept of the Hyperelliptic curves, which provide the same level of security as Rivest-Shamir-Adleman (RSA), Bilinear pairing and Elliptic Curve Cryptosystems (ECC) with lower-key size. The proposed scheme is subject to both formal and informal security analysis in order to show the feasibility of our scheme. Finally, the performance of the proposed scheme is analyzed via comparison with the relevant existing schemes that authenticates the superiority of our scheme in terms of security and efficiency.