PMI中属性权威与属性注册权威通信模型设计及形式化描述

Communication model of attribute authority and attribute registration authority in PMI and its formal description

授权管理基础设施(PMI)系统中属性权威(AA)与属性注册权威(ARA)通信状态多且变化复杂。提出了一个PMI中AA与ARA的通信模型,以避免不安全的中间状态出现。对该模型的特征进行了分析,运用有限状态机(FSM)对该模型进行形式化描述,并证明了其安全性。

There are many states in attribute authority （A-A） and attribute registration authority （ARA） communication, and its transformation is complicated. An AA and ARA communication model in privilege management infrastructure （PMI） was proposed, which could avoid insecure middle states. The finite state machine was used to formalize the proposed model, and to prove the secure state of the model.