By requiring all data packets been cryptographically authenticatable, the Named Data Networking (NDN) architecture design provides a basic building block for secured networking. This basic NDN function requires that all entities in an NDN network go through a security bootstrapping process to obtain the initial security credentials. Recent years have witnessed a number of proposed solutions for NDN security bootstrapping protocols. Built upon the existing results, in this paper we take the next step to develop a systematic model of security bootstrapping: Trust-domain Entity Bootstrapping (TEB). This model is based on the emerging concept of trust domain and describes the steps and their dependencies in the bootstrapping process. We evaluate the expressiveness and sufficiency of this model by using it to describe several current bootstrapping protocols.
翻译:通过要求所有数据包均可进行密码学认证,命名数据网络(NDN)架构设计为安全网络提供了基础构建模块。这一基本NDN功能要求网络中的所有实体必须经过安全引导过程以获取初始安全凭证。近年来,针对NDN安全引导协议已涌现出多种解决方案。本文在现有研究成果基础上,进一步提出系统化的安全引导模型:信任域实体引导(TEB)。该模型基于新兴的信任域概念,描述了引导过程中各步骤及其依赖关系。我们通过将其应用于描述当前多种引导协议,评估了该模型的表现力与完备性。