应用组合方法设计复杂安全协议

Complex protocol design by composition method

针对目前安全协议设计存在的方法抽象、适用范围小及复杂的特点,提出一种新的安全协议设计方法。给出了协议中基件与组件的定义,分析了组件的安全属性并基于组件设计实现相应安全目标的单步协议。最后,定义组合规则确保不同的单步协议能够组合成为一个复合协议的同时各个单步协议还能实现各自的安全目标。根据应用背景选择单步协议按组合规则组合后便可得所需的安全协议。研究结果表明,该方法可将一个复杂协议分解为若干简单的单步协议,使得协议的设计与分析都易于实现。

Aiming at the present methods,which have the following characters： Abstract,the narrow application range and complexity to design security protocol.A new approach is presented to design security protocol.Firstly,the concepts of the base case and the component are defined in the protocol.Secondly,the security attributes on the components are analyzed,and the single-step protocols which can implement the special security goals based on the components are designed.Finally,the composition rules which allow the combination of several single-step protocols part into a complicated protocol are defined.The security properties established by each independent part can’t be destroyed by the rules.Then the security protocol can be designed by the choice and composition of the single-step protocols which in specific application environment.The research results show that the specification of a complex protocol to be decomposed into the specifications of simpler single-step protocols can be permitted by the composition framework,and the design and verification of the protocol are easier to be handled.