基于分层的网络安全协议验证方法

Layer-based Model for Security Protocol Authentication

提出了一种新的基于分层的网络安全协议验证方法。首先对要验证的安全属性进行划分,将其分成若干安全子属性;其次对要进行验证的安全协议在安全性等价的条件下进行转换;然后逐步剖分成一个自底向上的多层协议,如果每一层子协议满足所要验证的安全属性的一个子属性,那么这个协议即可被证明是安全的。这种方法相比于传统的验证方法,不但高效,而且完备性更佳。

This paper presents a new layer-based method for the verification of security protocols. Firstly, it shows how to divide a security property which a protocol should respect into several sub-properties. Then, without changing its security prope rty, transform the protocol we want to prove safe and divide it into a multi-layer protocol in a way there are as many sub-layers as sub-properties. If ever y sub-layer can be proved to respect the property of a sub-destination, it can d raw the conclusion that the whole protocol also respects the initial property, in other words, the protocol is guaranteed to be secure. Compared with traditional verification method, this method is not only more efficient but also more complete.