TY - JOUR
T1 - E-PMM
T2 - An Efficient Authentication Scheme Based on Binary T-Degree Symmetric Polynomial and ECC for Producer Mobility Management in NDN
AU - Zhou, Tong
AU - Wang, Cong
AU - Bai, Hongpeng
AU - Xu, Guangquan
AU - Dai, Hong Ning
N1 - Funding information:
This work was supported in part by the National Science Foundation of China under Grant U22B2027 and Grant 62377036, in part by the Fundamental Research Funds for the Central Universities, JLU”, Hainan Province Science and Technology Special Fund under Grant ZDYF2024GXJS008, in part by the RD Program of China under Grant 2023YFB2703800, in part by Guangxi Science and Technology Plan Project (Guangxi Science and Technology Base and Talent Special Project) under Grant AD23026096 (Application 2022AC20001), and in part by the Xinjiang Corps “Tianchi Talent” Introduction Program, Xinjiang Production and Construction Corps Key Laboratory of Computing Intelligence and Network Information Security. Recommended for acceptance by Prof. Geng Sun.
Publisher Copyright:
© 2025 IEEE.
PY - 2025/11
Y1 - 2025/11
N2 - The Named Data Network (NDN) is an innovative architecture focusing on content-based networking, but it currently lacks a feasible solution for identity authentication of mobile producers. Authentication schemes in existing networks often fail to meet NDN's dual demands for security and operational efficiency, due to inherent flaws such a weaknesses like interest flooding attacks, challenges in cross-domain trust establishment and prolonged handover delays. Additionally, NDN's initial design did not adequately take into account the dynamic mobility of producers. In this paper, we propose an efficient producer mobility management and identity authentication scheme, called E-PMM, which revises the packet and router structures of NDN to support mobility management and secure authentication for mobile producers. Meanwhile, a producer-based control interest package is designed to mitigate interest flooding attacks. E-PMM utilizes Binary T-degree symmetric polynomials and ECC to create a robust authentication process. Furthermore, we incorporate the Canetti and Krawczyk (CK) adversary model into the security analysis, proving that E-PMM is resistant to critical attacks such as identity forgery and man-in-the-middle attacks. Through a combination of theoretical analysis and simulations, E-PMM significantly reduces handover delays, improves security, and efficiently manages authentication for producer mobility in mobile NDN environments.
AB - The Named Data Network (NDN) is an innovative architecture focusing on content-based networking, but it currently lacks a feasible solution for identity authentication of mobile producers. Authentication schemes in existing networks often fail to meet NDN's dual demands for security and operational efficiency, due to inherent flaws such a weaknesses like interest flooding attacks, challenges in cross-domain trust establishment and prolonged handover delays. Additionally, NDN's initial design did not adequately take into account the dynamic mobility of producers. In this paper, we propose an efficient producer mobility management and identity authentication scheme, called E-PMM, which revises the packet and router structures of NDN to support mobility management and secure authentication for mobile producers. Meanwhile, a producer-based control interest package is designed to mitigate interest flooding attacks. E-PMM utilizes Binary T-degree symmetric polynomials and ECC to create a robust authentication process. Furthermore, we incorporate the Canetti and Krawczyk (CK) adversary model into the security analysis, proving that E-PMM is resistant to critical attacks such as identity forgery and man-in-the-middle attacks. Through a combination of theoretical analysis and simulations, E-PMM significantly reduces handover delays, improves security, and efficiently manages authentication for producer mobility in mobile NDN environments.
KW - authentication
KW - binary t-degree symmetric polynomial
KW - ECC
KW - NDN
UR - http://www.scopus.com/inward/record.url?scp=105007600964&partnerID=8YFLogxK
U2 - 10.1109/TNSE.2025.3575780
DO - 10.1109/TNSE.2025.3575780
M3 - Journal article
AN - SCOPUS:105007600964
SN - 2327-4697
VL - 12
SP - 4772
EP - 4786
JO - IEEE Transactions on Network Science and Engineering
JF - IEEE Transactions on Network Science and Engineering
IS - 6
ER -