Named Data Networking (NDN) is an emerging network architecture, which is built by keeping data as its pivotal point. The in-network cache, one of the important characteristics, makes data packets to be available from multiple locations on the Internet. Hence data access control and their enforcement mechanisms become even more critical in the NDNs. In this paper, we propose a novel encryption-based data access control scheme using Role-Based Encryption (RBE). The inheritance property of our scheme provides a natural way to achieve efficient data access control over hierarchical content. This in turn makes our scheme suitable for large scale real world content-centric applications and services such as Netflix. Further, the proposed scheme introduces an anonymous signature-based authentication mechanism to reject bogus data requests nearer to the source, thereby preventing them from entering the network. This in turn helps to mitigate better denial of service attacks. In addition, the signature mechanism supports unlinkability, which is essential to prevent leakages of individual user's access patterns. Another major feature of the proposed scheme is that it provides accountability of the Internet Service Providers (ISPs) using batch signature verification. Moreover, we have developed a transparent and secure dispute resolution and payment mechanism using smart-contract and blockchain technologies. We present a formal security analysis of our scheme to show it is provably secure against Chosen Plaintext Attacks. We also demonstrate that our scheme supports more functionalities than the existing schemes and its performance is better in terms of computation, communication and storage.

The explosion of data generated by IoT devices encouraged the introduction of paradigm fog computing, which facilitates computation and analysis at the edge. Alongside fog, cloud computing co-exists for facilities such as massive storage, large processing capability, etc. However, storage and computation of data at different levels increase the risk of data security, which persuades the need for a proper access control scheme. Ciphertext-policy attribute-based encryption (CP-ABE) is a well-known cryptographic mechanism that provides data confidentiality and fine-grained access control. Unfortunately, the existing CP-ABE schemes are not well suited for the cloud-fog-IoT environment as they do not provide functionalities like key-escrow resistance, attribute update, attribute revocation, user revocation, and outsourcing of expensive operations with verifiable outsourced decryption, simultaneously in a single scheme. Therefore, this paper proposes a CP-ABE scheme named ACS-FIT, which supports key-escrow resistance, attribute update, user revocation, attribute revocation, and outsourcing of expensive operations with verifiable outsourced decryption functionalities altogether. The scheme is efficient as the expensive encryption and decryption operations are outsourced to fog nodes leaving only a small and constant amount of computation for the IoT devices. Additionally, the task of attribute update and revocation is also outsourced to a third party. The cost incurred during attribute update and revocation are also efficient as only those components are updated which are associated with the affected attributes. Meanwhile, the user holds a constant size key which remains unchanged during any update. The security analysis proves that the proposed scheme is secure against Chosen-Plaintext Attack under Decisional Bilinear Diffie-Hellman assumption. The performance analysis shows that the proposed scheme is efficient and suitable for IoT devices.