中文摘要：

命名数据网络（NDN）允许内容生成者的数据缓存于网络任何位置，这种数据和数据源分离的网内缓存机制导致的结果是以主机为中心的端到端认证数据传输不能用于命名数据网络。目前提出的NDN内容传输机制要求依赖内容分发网络（CDN）或要求数据源始终在线，然而这些要求不适合移动自组织网络环境。针对这一问题，首先基于EIGamal公钥密码体制设计了一种新的Yaksha系统，然后，基于新的Yaksha系统提出了命名数据移动自组织网络内容发布／订阅系统EY-CPS。EY-CPS系统中，Yaksha服务器分配和管理网络上传输内容的加／解密密钥，在不存在CDN或数据源离线的情况下，内容消费者也能访问网络上缓存的内容；另外，通过仅给合法用户发放内容发布／订阅“许可”，保证仅合法用户向网络发布内容或访问网络上缓存的内容；最后，在安全系统逻辑LS^2中建模并分析了EY-CPS系统的安全性，并对相关方案作了分析比较。

英文摘要：

It is allowed that data of content producer can be cached anywhere in NDN （named data networking）. This scheme decoupling of data from the source makes traditional end-end authentication transmission unavailable in NDN. Existing solutions of content delivery rely on CDN （content delivery network） or require that data source is always online. However, these requirements are not fit for mobile ad hoc networks （MANET）. A new Yaksha system is developed based on EIGamal. And then based on this new Yaksha scheme a content publish/subscribe system for NDN MANET is proposed which is called EY-CPS, In EY-CPS, Yaksha server distributes and manages the encrypted/decrypted key for content transmitted on network. So, even if in two cases that there is no CDN or data source is offline, it is also allowed that content consumer accesses content cached on network in new scheme. In addition, it is guaranteed that only legiti- mate users can publish and access content, because Yaksha server distributes ＂license＂ only to legitimate user. The license is used for verifying user identity before publishing content to the network or attaining content from the network. Finally, security properties of EY-CPS in LS2 is proved and comparison analysis is made between proposed solution and related solutions.