基于离线可信第三方的电子支付协议公平性分析  

Fairness analysis of electronic payment protocol based on offline TTP

作　　者：田树华[1] 陈立佳[1] 李建茹[1] 

机构地区：[1]唐山学院信息工程系,河北唐山063020

出　　处：《计算机应用》2009年第7期1839-1843,共5页journal of Computer Applications

基　　金：河北省自然科学基金资助项目(F2007000682)

摘　　要：基于离线可信第三方的电子支付协议通常具有复杂结构,它由多个子协议组合而成,与传统认证协议有显著差别,主要表现在协议目标和攻击者模型两个方面。电子支付协议最主要目的是实现买卖双方的公平交换,同时假定交换双方都可能是不诚实的,需要考虑来自协议合法实体的内部攻击。在重新定义协议公平性和攻击者模型的基础上,提出扩展的串空间模型,以一个真实的电子支付协议为对象,演示了基于串空间理论的电子支付协议公平性形式化模型和分析方法,并指出该协议存在安全缺陷,提出改进意见。The electronic payment protocol based on offLine TTP is made up of multiple sub-protocols, and is significantly different from traditional authentication protocol, especially on protocol goal and penetrator model. The main purpose of the electronic payment protocol is to realize fair exchange between buyers and sellers who are assumed to be dishonest. Then, it is necessary for those buyers and sellers to prevent the internal attack. On the basis of redefining protocol fairness and penetrator model, an extended strand space model which took an electronic payment protocol as object was proposed to demonstrate a fairness formal analysis method. The security deficiency and improvement suggestions of the electronic payment protocol were also discussed.

关 键 词：电子支付协议 离线可信第三方 公平性 串空间 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]