Named Data Networking (NDN) aims to establish an efficient content delivery architecture. In NDN, secure and effective identity authentication schemes ensure secure communication between producers and routers. Currently, there is no feasible solution to perform identity authentication of mobile producers in NDNs. Identity authentication schemes in other networks are either weak in security or performance, such as privacy leakage, difficulty to establish cross-domain trust, and long handover delays, and are not fully adaptable to the security requirements of NDNs. Additionally, the mobility of producers was not fully considered in the initial design of NDNs. This paper first revises the structure of packets and routers to support the identity authentication and mobility of producers. On this basis, this paper proposes a secure and efficient certificateless ECC-based producer identity authentication scheme (CL-BPA), which includes initial authentication and re-authentication, aimed at achieving rapid switch authentication and integrating blockchain to solve single-point failure issues. Using the Canetti and Krawczyk (CK) adversarial model and informal security analysis, the proposed CL-BPA scheme is demonstrated to be resistant to anonymity attacks, identity forgery attacks, and man-in-the-middle attacks. The performance analysis demonstrates that the proposed CL-BPA scheme exhibits excellent capabilities in terms of computation delay, communication cost, smart contract execution time, average response delay, and throughput.

中文翻译：

---

一种高效的无证书支持区块链的身份验证方案，用于保护命名数据网络中的生产者移动性


命名数据网络 （NDN） 旨在建立高效的内容交付架构。在 NDN 中，安全有效的身份验证方案可以确保生产者和路由器之间的安全通信。目前尚无可行的解决方案来对 NDN 中的移动生产者进行身份认证，其他网络中的身份认证方案要么在安全性上较弱，要么在性能上较弱，例如隐私泄露、难以建立跨域信任、较长的切换延迟，并且不能完全适应 NDN 的安全要求，此外，在 NDN 的初始设计中没有充分考虑生产者的移动性。本文首先修改了数据包和路由器的结构，以支持生产者的身份认证和移动性。在此基础上，本文提出了一种安全高效的基于无证书 ECC 的生产者身份认证方案 （CL-BPA），该方案包括初始认证和重新认证，旨在实现快速开关认证和集成区块链以解决单点故障问题。使用 Canetti 和 Krawczyk （CK） 对抗模型和非正式安全分析，所提出的 CL-BPA 方案被证明可以抵抗匿名攻击、身份伪造攻击和中间人攻击。性能分析表明，所提出的 CL-BPA 方案在计算延迟、通信成本、智能合约执行时间、平均响应延迟和吞吐量方面表现出优异的能力。