一种电子商务协议形式化分析方法  

A Formal Method for Analyzing Electronic Commerce Protocols

作　　者：卿斯汉[1] 

机构地区：[1]中国科学院软件研究所信息安全技术工程研究中心

出　　处：《软件学报》2005年第10期1757-1765,共9页Journal of Software

基　　金：国家自然科学基金;国家重点基础研究发展规划(973);北京市自然科学基金~~

摘　　要：提出了一种新颖的形式化方法,可以用于分析电子商务协议的安全性质,例如可追究性和公平性.与以前的工作相比较,主要贡献在于:(1)对协议主体的拥有集合给出了形式化定义,且主体的初始拥有集合只依赖于环境;(2)将协议的初始状态假设集合分为3类:基本假设集合、可信假设集合和协议理解假设集合,避免了因非形式化的初始假设而产生的分析错误;(3)对可信假设作细粒度的形式化规范,揭示协议的内涵;(4)建立公理系统,使新方法更为严格与合理.A formal method which can be used to analyze security properties such as accountability and fairness in electronic commerce protocols is presented. Compared with the previous work, the main contributions are the following. Firstly, a formal definition is given to the possession set of each protocol participant, and the initial possession set depends only on the environment. Secondly, the set of initial state assumptions is divided into three categories： basic assumptions, trust assumptions, and protocol comprehension assumptions, in order to avoid analysis errors caused by informal initial state assumptions. Thirdly, the set of trust assumptions is articulated by formal specification at a lower level of granularity, exposing the essence of the protocol. Fourthly, establishing an axiom system makes the new approach more rigorous and expressive.

关 键 词：形式化分析 电子商务协议 可追究性 公平性 可信第三方 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]