安全协议认证属性的设计框架研究

Study on framework of authentication property design for security protocols

提出了一种安全协议的认证属性设计方法。该方法设计了协议认证消息结构,通过通道模型增加设计过程中消息结构的动态安全特性,采用迹模型准确描述消息交互过程。讨论了避免攻击的安全属性设计原则,并通过形式化的方法表示出来。最后证明了该形式化方法的有效性。

A method to design the authentication property of the security protocols was presented. The message structures for the authentication goal were designed. With the help of the channel-model, the dynamic characteristics of security property were added to the designing process. This method used the trace-model to accurately depict the message exchange. The design principles for avoiding the attack on the security properties were discussed and formalized into inference rules. At last, this method was proved to be valid.