基于公钥的层次化网络安全协议设计  

Layer-based Model for Security Protocol Design Using Public Key Cryptography

作　　者：谢津[1] 黄连生[1] 

机构地区：[1]清华大学计算机系网络技术研究所,100084

出　　处：《微计算机信息》2007年第30期63-64,90,共3页Control & Automation

摘　　要：提出了一种基于公钥的层次化网络安全协议设计模型:协议的设计在若干层分别进行,每一层子协议完成协议所要实现的一个子目标,并为上一层的子协议提供数据接口,然后将各层子协议依次合并起来,完成整个协议的设计。在以前的研究工作中,协议安全性总是被看作一个整体,给协议的设计与证明带来极大的复杂性限制。层次化模型的使用简化了安全协议设计的过程,使协议的设计更加清晰,代价更小,安全性证明也更为简单。另外,所设计的协议具有更大的灵活性,可以适应各种应用系统的需求。This paper presents a layer-based model for security protocol design based on public key. That is, how to design security protocol by producing sub-protocols in several different layers. Every sub-protocol achieves a sub-goal derived from the protocol o- riginal goal and provides a data interface for the higher layer sub-protocol. Then we can obtain the design of the whole protocol by combining all the sub-protocols layer by layer. Using the layer-based model, whose basic idea goes against the common thought derived from the protocol authentication researches that security is regarded as an integral property, is very effective： it can make the entire security protocol design procedure clearer, more concise, and less expensive. Moreover, the layer differentiation simplifies the expression of authentication properties and diversifies the resulting design： this can be taken advantage of if we want to design different protocols meeting the requirements of different applications.

关 键 词：安全协议 设计模型 层次化 公钥 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]