[icnrg] Fwd: New Version Notification for draft-li-icnrg-hopauth-02.txt

Ruidong Li <lrd@nict.go.jp> Fri, 06 March 2020 07:21 UTC

References: <158347699222.14715.14168168919440492512@ietfa.amsl.com>
From: Ruidong Li <lrd@nict.go.jp>
To: ICNRG <icnrg@irtf.org>
Message-ID: <f50ec9fc-f5a7-e9a2-0e75-f06a09298f5f@nict.go.jp>
Date: Fri, 06 Mar 2020 16:21:19 +0900
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.5.0
MIME-Version: 1.0
In-Reply-To: <158347699222.14715.14168168919440492512@ietfa.amsl.com>
Content-Type: multipart/alternative; boundary="------------067CEB3465A16C7D8CA8F741"
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/icnrg/uqCTmyw66n-NCp6xmVa_iFesQFU>
Subject: [icnrg] Fwd: New Version Notification for draft-li-icnrg-hopauth-02.txt
Precedence: list

Dear All,

We have updated and uploaded our HopAuth draft v02. This draft targets to provide copyholder authentication, data-retrieval path authentication and Interest authentication to mitigate data poisoning attack and Interest flooding attack, besides the publisher authentication. It is basically a certificate chain-based approach, which can be operated completely independent of centralized servers (e.g. certificate authority (CA)).

In this new version, to make the problem more clearly, we added one paragraph (last paragraph in pp. 3) to explain the differences with the existing KeyID mechanism built in the CCNx design.

Besides, we also address the anonymity question raised from Dirk in this new version. That is, the first-hop router to consumer can remove the certificate from it to consumer before forwarding the Interest to preserve the consumer anonymity.

Your feedback on this document is welcome.

Best Regards,
Ruidong

-- 
Ruidong Li,
Senior Researcher, Network System Research Institute,
National Institute of Information and Communications Technology (NICT), Japan
Email: lrd@nict.go.jp  liruidong@ieee.org


-------- Forwarded Message --------
Subject: 	New Version Notification for draft-li-icnrg-hopauth-02.txt
Date: 	Thu, 05 Mar 2020 22:43:12 -0800
From: 	internet-drafts@ietf.org
To: 	Hitoshi Asaeda <asaeda@nict.go.jp>, Ruidong Li <lrd@nict.go.jp>




A new version of I-D, draft-li-icnrg-hopauth-02.txt
has been successfully submitted by Ruidong Li and posted to the
IETF repository.

Name: draft-li-icnrg-hopauth
Revision: 02
Title: Hop-by-Hop Authentication in Content-Centric Networking/Named 
Data Networking
Document date: 2020-03-05
Group: Individual Submission
Pages: 16
URL: https://www.ietf.org/internet-drafts/draft-li-icnrg-hopauth-02.txt
Status: https://datatracker.ietf.org/doc/draft-li-icnrg-hopauth/
Htmlized: https://tools.ietf.org/html/draft-li-icnrg-hopauth-02
Htmlized: https://datatracker.ietf.org/doc/html/draft-li-icnrg-hopauth
Diff: https://www.ietf.org/rfcdiff?url2=draft-li-icnrg-hopauth-02

Abstract:
The unpredictability of consumers, routers, copyholders, and
publishers for the in-network data retrievals in Content-Centric
Networking (CCN) / Named Data Networking (NDN) poses a challenge to
design an authentication mechanism to inhibit the malicious consumers
to flood data requests and prevent the fake data from being provided.
Signature is adopted as the fundamental function in CCN / NDN, which
however can only provide publisher authentication with additional
certificate acquisition. This document describes the Hop-by-Hop
Authentication mechanism (HopAuth) integrating certificate collection
and packet forwarding potentially with the assistance from
certificate authority to provide consumer authentication, copyholder
authentication and path authentication to enable the in-network data
retrieval to be trustworthy, besides the publisher authentication.



Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat

[icnrg] Fwd: New Version Notification for draft-l… Ruidong Li