Capabilities for Distributed Authorization in Information-Centric Networking

TL;DR

This paper proposes a fully distributed, capability-based authorization scheme tailored for Information-Centric Networking (ICN) architectures, aiming to improve trust and security without centralization.

Contribution

It introduces a novel, generalized authorization scheme that integrates seamlessly into ICN, enhancing security and reducing vulnerability to denial-of-service attacks.

Findings

The scheme fits well within ICN architectures.

It improves trust models in distributed networks.

It mitigates certain denial-of-service attack vectors.

Abstract

Authorization currently introduces partial centralization in otherwise distributed network architectures, such as ICN approaches. Analyzing existing work in (partially) distributed authentication and authorization, and rearranging proven methods, this paper introduces a generalized, capability based and fully distributed authorization scheme. It argues that such a scheme can fit neatly into ICN architectures in order to enhance the trust model and mitigate against certain classes of denial-of-service attacks. Keywords: authorization, distributed systems security, ICN