Security analysis of the access control solution of NDN using BAN logic

Named Data Networking (NDN) is a new promising architecture of information-centric networking. For its caching property, traditional mechanisms of access control can no longer work. Hamdane et al. propose a new access control solution for both closed and open environments. In this paper, we make the very first attempt to formally analyze this access control solution. Inspired by the basic BAN logic which is often used to describe protocols by logical formulas, we present our BAN-like logic by adding some new notions to make it suitable for the access control solution. Using the BAN-like logic, the procedures of the access control solution is idealized in the form of the beliefs of principals. Then the idealized procedures are analyzed under several security goals with a set of logical postulates. Several unsatisfied goals may lead the access control solution to be vulnerable to intruders. We give the modification in the idealized procedures to archive more goals. We also present the related modification in the implementation of the access control solution. Our study helps to improve security and protect against various attacks for the access control solution.