Internet of Things (IoT) is an evolving technology of the modern digital world that generates and transmits huge data through insecure communication channel. However, not only due to its insecure/open communication medium but also owing to the complexity of maintaining large number of IP addresses (which are used for communication of data) of traditional IoT environment, security is one of the major concerns of IoT. Accordingly, Content Centric Network-Internet of Things (CCN-IoT) is considered as one of the highly efficient architecture to overcome the security concerns of the traditional IoT infrastructure as it uses unique names (based on different naming schemes) to retrieve/transmit data (these data are managed by data publishers). However, in CCN-IoT the content publisher no longer has access control over the content after it is been released; thus, access control management is one of the significant concerns of CCN-IoT. On the other hand, in existing access control architectures, users need to communicate with the publishers to access the content key using which s/he could get the content. As a result, it leads to inconvenient content retrieving procedure. Therefore, in this paper, we have proposed a novel and secure access control architecture, namely Key-Policy Attribute-based access control (KPAAC) architecture, where a Content Publisher and Access Manager (CPAM) is integrated to it. Unlike existing architecture, the CPAM of the proposed architecture provides convenient content retrieving procedure since the users have direct access to the content key through an access key, which is provided by the CPAM during the user registration phase. In line with it, the informal security analysis of the proposed architecture is carried out, which proves that our architecture resists all well-known security attacks. Thus, the proposed architecture is flexible and feasible to be implemented in a real-life CCN-IoT network scenario.