Şifrelenmiş İçerik Dağıtım Sistemlerinde Güvenli ve Uygulanabilir Ağ-İçi Önbellekleme Mimarileri

Abstract

Uçtan uca (E2E) şifrelenmiş trafiğin hızlı artışı, geleneksel ağ-içi önbellekleme mekanizmalarını zorlamakta ve bu yaklaşımın uygulanabilirliğine yönelik endişeleri artırmaktadır. Bu çalışma, dürüst-ama-meraklı bir İnternet servis sağlayıcısı (ISP) ile dürüst istemci ve içerik sağlayıcı varsayımlarında E2E-uyumlu önbelleklemenin tasarım alanını incelemektedir. Mevcut çalışmaları dağıtıma (deployability) odaklı dört aile altında sınıflandırıyoruz: TLS ara kutu (middlebox) uzantıları, Güvenli İçerik Yetkilendirme (Secure Content Delegation, SCD), dağıtıcı (dispatcher) destekli yaklaşımlar ve çoklu içerik sağlayıcı (multi-CP) önbellek bölümlendirme yöntemleri. Bu aileleri dağıtılabilirlik, güvenlik/gizlilik ve performans ölçütleri üzerinden karşılaştırıyoruz. Bağlanabilirlik (linkability) ve popülerlik sızıntısı gibi tekrar eden riskleri analiz ediyor, bunları önbellek isabet oranı ve gecikme ile ilişkilendiriyor ve pratik ayar noktalarını (ör., tanımlayıcı yenileme sıklığı, parçalama stratejileri, anahtar yayımlama zamanlaması) ortaya koyuyoruz. Ayrıca, uç düğüm anahtar yönetimi, çoklu içerik sağlayıcı yetkilendirmesi, popülerlik gizleme ve hareketlilik dayanıklılığı gibi açık araştırma problemlerini konsolide ediyoruz. Sonuç olarak çalışma, şifrelenmiş ve gizlilik korumalı ağ-içi önbellekler geliştiren araştırmacılar ve operatörler için özlü ve standart-farkındalığı yüksek bir rehber sunmaktadır.

Keywords

• ağ içi önbellekleme
• uçtan uca şifreleme
• TLS/HTTPS
• güvenli içerik yetkilendirme
• ağ tarafsızlığı
• uygulanabilirlik
• gizliliğin korunması

Architectures for Secure and Deployable In-Network Caching in Encrypted Content Delivery Systems

Abstract

The rapid growth of end-to-end (E2E) encrypted traffic strains traditional in-network caching, heightening concerns about its viability. This paper charts the design space of E2E-compatible caching under an honest-but-curious Internet service provider (ISP), assuming honest clients and content providers. We group prior work into four deployment-oriented families—TLS middlebox extensions, Secure Content Delegation (SCD), dispatcher-aided schemes, and multi-Content Provider (multi-CP) cache partitioning—and qualitatively compare them on deployability, security/privacy, and performance. We analyze recurring risks such as linkability and popularity leakage, relate them to cache hit ratio and latency, and distill practical levers (e.g., identifier refresh cadence, chunking, key-release timing). We also consolidate open problems, from edge key management and multi-CP authorization to popularity hiding and mobility robustness. Overall, the paper provides a concise, standards-aware guide for researchers and operators and highlights how the shift toward QUIC/HTTP/3 increasingly constrains what can be deployed in practice. Keywords: in-network caching, end-to-end encryption, TLS/HTTPS, secure content delegation, network neutrality, deployability, privacy preservation.

Keywords

• in-network caching
• end-to-end encryption
• TLS/HTTPS
• secure content delegation
• network neutrality
• deployability
• privacy preservation

References

1. G. S. Paschos, G. Iosifidis, M. Tao, D. Towsley, and G. Caire, “The role of caching in future communication systems and networks,” IEEE Journal on Selected Areas in Communications, 36(6), 1111– 1125, (2018).
2. H. Yang, H. Pan, and L. Ma, “A review on software defined content delivery network: a novel combination of cdn and sdn,” IEEE Access, (2023).
3. ericsson.com, “Mobile data traffic outlook,” https://www.ericsson.com/en/reports-and-papers/mobility-report/dataforecasts/mobile-traffic-forecast, (Accessed on 20/11/2025).
4. G. Paschos, E. Bastug, I. Land, G. Caire, and M. Debbah, “Wireless caching: Technical misconceptions and business barriers,” IEEE Communications Magazine, 54(8), 16–22, (2016).
5. K. Xue, P. He, J. Yang, Q. Xia, and D. S. Wei, “SCD2: Secure content delivery and deduplication with multiple content providers in information-centric networking,” IEEE/ACM Transactions on Networking, 30(4), 1849–1864, (2022).
6. B. Mao, J. Liu, Y. Wu, and N. Kato, “Security and privacy on 6G network edge: A survey,” IEEE Communications Surveys & Tutorials, 25(2), 1095-1127, (2023).
7. D. Naylor, K. Schomp, M. Varvello, I. Leontiadis, J. Blackburn, D. R. López, K. Papagiannaki, P. Rodriguez Rodriguez, and P. Steenkiste, “Multi-context TLS (mcTLS): Enabling secure in-network functionality in TLS,” ACM SIGCOMM Computer Communication Review, 45(4), 199–212, (2015).
8. D. Naylor, R. Li, C. Gkantsidis, T. Karagiannis, and P. Steenkiste, “And then there were more: Secure communication for more than two parties,” in Proceedings of the 13th International Conference on Emerging Networking Experiments and Technologies, 88–100, (2017).

9. M. Hoekstra, R. Lal, P. Pappachan, V. Phegade, and J. Del Cuvillo, “Using innovative instructions to create trustworthy software solutions,” in HASP@ISCA, 11(10.1145), 2487726–2488370, (2013).
10. H. Lee, Z. Smith, J. Lim, G. Choi, S. Chun, T. Chung, and T. T. Kwon, “maTLS: How to make TLS middlebox-aware?” in NDSS Symposium, (2019).
11. J. Li, R. Chen, J. Su, X. Huang, and X. Wang, “Me-TLS: Middlebox-enhanced TLS for Internet-of-Things devices,” IEEE Internet of Things Journal, 7(2), 1216–1229, (2019).
12. X. d. C. de Carnavalet and P. C. van Oorschot, “A survey and analysis of TLS interception mechanisms and motivations,” ACM Computing Surveys, 55(13s), 1 – 40, (2023).
13. M. Thomson, G. Eriksson, and C. Holmberg, “An architecture for secure content delegation using HTTP,” IETF Internet-Draft draft-thomson-http-scd-00, (2016).
14. J. Leguay, G. S. Paschos, E. A. Quaglia, and B. Smyth, “Cryptocache: Network caching with confidentiality,” in 2017 IEEE International Conference on Communications (ICC), 1–6, (2017).
15. G. Eriksson, J. Mattsson, N. Mitra, and Z. Sarker, “Blind cache: A solution to content delivery challenges in an all-encrypted web,” Ericsson Review, 94(1), 8–19, (2017).
16. K. Emura, S. Moriai, T. Nakajima, and M. Yoshimi, “Cache-22: A highly deployable end-to-end encrypted cache system with post-quantum security,” Cryptology ePrint Archive, (2022).
17. M. Usman, M. R. Asghar, I. S. Ansari, F. Granelli, Q. H. Abbasi, and K. Qaraqe, “A marketplace for efficient and secure caching for IoT applications in 5G networks,” in 2018 IEEE Wireless Communications and Networking Conference (WCNC), 1–6, (2018).
18. J. R. Douceur, A. Adya, W. J. Bolosky, P. Simon, and M. Theimer, “Reclaiming space from duplicate files in a serverless distributed file system,” in Proceedings of the 22nd International Conference on Distributed Computing Systems, 617–624, (2002).
19. X. Yuan, X. Wang, J. Wang, Y. Chu, C. Wang, J. Wang, M.-J. Montpetit, and S. Liu, “Enabling secure and efficient video delivery through encrypted in-network caching,” IEEE Journal on Selected Areas in Communications, 34(8), 2077–2090, (2016).
20. R. Curtmola, J. Garay, S. Kamara, and R. Ostrovsky, “Searchable symmetric encryption: Improved definitions and efficient constructions,” Journal of Computer Security, 19(5), 895–934, (2011).
21. B. Fan, D. G. Andersen, M. Kaminsky, and M. D. Mitzenmacher, “Cuckoo filter: Practically better than Bloom,” in Proceedings of the 10th ACM International Conference on Emerging Networking Experiments and Technologies, 75–88, (2014).
22. I. Psaras, W. K. Chai, and G. Pavlou, “Probabilistic in-network caching for information-centric networks,” in Proceedings of the 2nd ICN Workshop on Information-Centric Networking, 55–60, (2012).
23. D. Perino, M. Varvello, and K. P. Puttaswamy, “ICN-RE: Redundancy elimination for information-centric networking,” in Proceedings of the 2nd ICN Workshop on Information-Centric Networking, 91–96, (2012).
24. D. Andreoletti, O. Ayoub, C. Rottondi, S. Giordano, G. Verticale, and M. Tornatore, “A privacy-preserving protocol for network-neutral caching in ISP networks,” IEEE Access, 7, 160227–160240, (2019).
25. A. Araldo, G. Dán, and D. Rossi, “Caching encrypted content via stochastic cache partitioning,” IEEE/ACM Transactions on Networking, 26(1), 548–561, (2018).
26. D. Andreoletti, S. Giordano, C. Rottondi, M. Tornatore, and G. Verticale, “To be neutral or not neutral? The in-network caching dilemma,” IEEE Internet Computing, 22(6), 18–26, (2018).
27. A. Shamir, “How to share a secret,” Communications of the ACM, 22(11), 612–613, (1979).
28. D. Andreoletti, O. Ayoub, S. Giordano, G. Verticale, and M. Tornatore, “Privacy-preserving caching in ISP networks,” in 2019 IEEE 20th International Conference on High Performance Switching and Routing (HPSR), 1–6, (2019).
29. S. Cui, M. R. Asghar, and G. Russello, “Multi-CDN: Towards privacy in content delivery networks,” IEEE Transactions on Dependable and Secure Computing, 17(5), 984–999, (2020).