认证测试方法的改进及应用  

Improvement and application of authentication test

作　　者：陈力琼[1] 陈贤[2] 

机构地区：[1]上海交通大学计算机科学与工程系,上海200240 [2]西安电子科技大学通信工程系,西安710071

出　　处：《计算机科学与探索》2008年第1期104-109,共6页Journal of Frontiers of Computer Science and Technology

基　　金：the National High- Tech Research and Development Plan of China under Grant No.2006AA01Z422( 国家高技术研究发展计划( 863) ) .

摘　　要：基于串空间模型的认证测试方法被证明是一种分析认证协议的有效工具,为了使之适用于类型更多、规模更大的安全协议,并提高其在协议的认证性、可达性、机密性、非否认性、会话密钥的新鲜性及主体间的关联度上的分析能力,对原有的认证测试方法进行改进,充分利用消息格式,细化分析步骤,增添相关符号以分析复杂协议的更多安全特性。利用该方法能缩减模型检测自动化工具的搜索范围,在解决空间爆炸问题的同时有效地找到多方协议的具体攻击路径,而且它对安全协议的设计和验证也具有一定的指导作用。Authentication test was proved to be an effective tool of protocol analysis based on strand space. In order to make it to be suitable for analyzing more kinds of protocols and their authentication, security, freshness, non-repudiation and correspondence of principals, authentication test can be improved by making full use of the format of message, fining the procedure of analysis and adding more symbols to represent more goals of security. This improved authentication test combining with model checking automatic tools can solve the problem of space explosion and find detailed attacks as well. It also provides guidance for the design and validation of the protocols.

关 键 词：串空间 认证测试 主体关联度 模型检测 

分 类 号：TN913[电子电信—通信与信息系统]