基于分层的网络安全协议验证方法  

Layer-based Model for Security Protocol Authentication

作　　者：张磊[1] 侯俊峰[1] 黄连生[1] 

机构地区：[1]清华大学计算机系网络技术研究所,北京100084

出　　处：《计算机应用研究》2005年第7期143-145,共3页Application Research of Computers

摘　　要：提出了一种新的基于分层的网络安全协议验证方法。首先对要验证的安全属性进行划分,将其分成若干安全子属性;其次对要进行验证的安全协议在安全性等价的条件下进行转换;然后逐步剖分成一个自底向上的多层协议,如果每一层子协议满足所要验证的安全属性的一个子属性,那么这个协议即可被证明是安全的。这种方法相比于传统的验证方法,不但高效,而且完备性更佳。This paper presents a new layer-based method for the verification of security protocols. Firstly, it shows how to divide a security property which a protocol should respect into several sub-properties. Then, without changing its security prope rty, transform the protocol we want to prove safe and divide it into a multi-layer protocol in a way there are as many sub-layers as sub-properties. If ever y sub-layer can be proved to respect the property of a sub-destination, it can d raw the conclusion that the whole protocol also respects the initial property, in other words, the protocol is guaranteed to be secure. Compared with traditional verification method, this method is not only more efficient but also more complete.

关 键 词：安全协议 层次化 验证方法 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]