## 1 Introduction  
Information-Centric Networking (ICN) is an emerging network architecture for the future network, whose most important characteristic is that it provides support for the identifier (ID) and locator separation. Thus, an infrastructure that maps and stores the mappings of IDs and locators is needed and named as the Name Resolution System (NRS) [1, 2]. NRS is an essential component of the ICN infrastructure. The delivery of data or content can be realized only when the name resolution process is completed correctly. Meanwhile, it also become the key target of network attackers, especially for the Standalone Name Resolution (SNR) approach [3, 4]. The approach has been adopted by a number of research projects based on the advantages such as being easier to deploy, higher security, and less change to the underlying structure of the network than Name-Based Routing approach (NBR) in two kinds of name resolution approaches of existing ICN architectures, such as DONA [5], MobilityFirst [6], PURSUIT [7], NetInf [8, 9], SEANET (on site, elastic, autonomous network) [10], SAIL [11], etc. In the SNR approach, the name resolution process and message routing are decoupled, and it usually uses flat names to look up content's locators (e.g., the IP or NA), and then, the content is routed by the locators. Content publishers and subscribers need to register and authenticate through SNR nodes in order to publish and subscribe content, which makes SNR nodes become important management nodes in the system and the key attack objects of malicious attackers. The two biggest security threats are DDOS attack and Content Pollution Attack (CPA). Compared with the DDOS attack, the CPA attack is a quite covert attack. Attackers disguise as legitimate users to register with the SNR system and continuously send invalid content to the network at a low speed, thus consuming a lot of the resources and time of the SNR system to serve the attackers, resulting in a serious increase in the resolution delay of normal users and even failure to register or to resolve identifiers. However, due to its low-speed characteristic, this attack is difficult to be found and handled quickly by the system. Meanwhile, a large amount of invalid contents injected into the network will further form cache pollution. Therefore, an access control scheme to restrict potential malicious user registration in SNR nodes is necessary. Users are the first to perceive the impact of network attacks. Through the user voting algorithm, network attacks can be found and handled most quickly. Combined with self-certification [5] to authenticate identity and content, we take the immediate revocation of a misbehaving user's self-certifying identifier and his public-private key pairs as primary protection for the safety of SNR nodes and the whole ICN system. To be specific, we propose a decentralized revocation approach by a voting incentive algorithm to reasonably build a blacklist of malicious users and develop a register access control scheme for the SNR system to counter a CPA attack based on the blacklist in this paper. Our scheme can not only solve the content pollution attack of the SNR system but also restrict further form cache pollution. The main contributions are as follows:  
1. We introduce a novel scheme to counter content pollution attack from the perspective of SNR system security. We analyze the significant impact of content pollution attacks on the SNR system. As far as we know, the existing content pollution attacks carry out security detection and defense measures on the cache. 2. We give the complete rules of invalid content discovery, reporting and voting revocation process, and the progressive relationship between invalid content revocation and public key revocation, which gives the reasonable process of being identified as blacklist users. 3. We designed a series of rules for network users to automate responses about the potential malicious behavior report and prove the rationality and high reliability of these rules.