Schematizing Trust in Named Data Networking

Securing communication in network applications involves many complex tasks that can be daunting even for secu-rity experts. The Named Data Networking (NDN) architec-ture builds data authentication into the network layer by re-quiring all applications to sign and authenticate every data packet. To make this authentication usable, the decision about which keys can sign which data and the procedure of signature verification need to be automated. This pa-per explores the ability of NDN to enable such automation through the use of trust schemas. Trust schemas can provide data consumers an automatic way to discover which keys to use to authenticate individual data packets, and provide data producers an automatic decision process about which keys to use to sign data packets and, if keys are missing, how to create keys while ensuring that they are used only within a narrowly defined scope (“the least privilege princi-ple”). We have developed a set of trust schemas for several prototype NDN applications with different trust models of varying complexity. Our experience suggests that this ap-proach has the potential of being generally applicable to a wide range of NDN applications