一种面向主体的密码协议设计逻辑

An Agent-Oriented Logic for Design of Cryptographic Protocols

文章给出了面向主体的密码协议设计逻辑;根据提供的不同安全服务,将密码协议中的密码机制抽象为不同信道;形式化地描述了密码协议目的细化、不同消息元素对安全服务的需求、消息与协议运行环境的关联性、消息内容的全信息性和消息优化,将它们作为密码协议的设计规则和预防攻击的方法;在密码协议的设计步骤中考虑了密码协议的目的、主体的角色及其特性、密码机制、初始假设和消息内容的设计;根据给出的设计逻辑、设计规则和设计步骤形式化和系统化地设计了一个新的基于挑战/响应相互身份认证和Diffie-Hellman密钥协商机制的密码协议;最后将本文设计的逻辑与BSW逻辑进行了比较。

In the paper we provide an agent-oriented logic to design cryptographic protocols. According to their various security services, cryptographic mechanisms are abstracted to various channels in cryptographic protocols. We formally describe refinements for goals of cryptographic protocols, requirements of security services which various message components need, association between messages and environments in which protocols run, full information of message contents and optimization of messages, and we regard them as design rules and methods to prevent attacks. In design steps for cryptographic protocols, we consider how to design their goals, agents’roles and characteristics, cryptographic mechanisms, initial assumptions and message contents. According to the design logic, design rules and design steps above, we formally and systematically design a new cryptographic protocol which is based on challege-response mutual authentication and Diffie-Hellman key agreement. At last we compare our logic and the BSW logic.