一种安全协议的规范化设计方法  

A Standardized Method of Security Protocol Design

作　　者：邓帆[1] 李益发[1] 张文政 

机构地区：[1]信息工程大学信息工程学院,郑州市俭学街7号450002 [2]成都市现代通信国家重点实验室,成都市创业路6号610000

出　　处：《武汉大学学报（信息科学版）》2010年第5期603-606,共4页Geomatics and Information Science of Wuhan University

基　　金：成都市现代通信技术国家重点实验室基金资助项目(9140C1103040902)

摘　　要：提出了应用组合方法进行安全协议的规范化设计,给出了协议中基件与组件的定义,分析了组件的安全属性,及基于组件设计能实现相应安全目标的单步协议;定义了组合规则,确保不同的单步协议能够组合成为一个复合协议,同时各个单步协议还能实现各自的安全目标。至此,根据具体的应用背景选择合适的单步协议,按照组合规则组合后,便可得到满足需求的安全协议。该方法可将一个复杂协议分解为若干基于组件的简单单步协议,使得协议的设计与分析都易于实现。We present a standardized method of security protocol design through composition,define the concepts of the base case and the component in the protocol,analyze the security attributes on the components,and design the single-step protocols which can implement the special security goals based on the components.The combination of several single-step protocols part into a complicated protocol without destroying the security properties established by each independent part.Then it can design security protocol by the context of specific applications based on the choice of the single-step protocols.In other words,the composition framework permits the specification of a complex protocol to be decomposed into the specifications of simpler single-step protocols based on the components,and thus makes the design and verification of the protocol easier to handle.

关 键 词：安全协议 设计 组件 逻辑分析 组合 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]