Otway-Rees协议改进及安全分析  

Improvement and Security Analysis of the Otway-Rees Protocol

作　　者：王君 昝亚洲 刘爱森[3] 屈萌 

机构地区：[1]数学工程与先进计算国家重点实验室 [2]92187部队 [3]山东大学数学学院 [4]95900部队

出　　处：《信息工程大学学报》2014年第5期525-530,共6页Journal of Information Engineering University

基　　金：国家973计划资助项目(2012CB315905;2012CB315901)

摘　　要：选取Otway-Rees协议作为研究对象,用一种改进的BAN类逻辑――安全协议分析本征逻辑(SPALL)作为协议分析工具展开研究。首先对SPALL系统进行扩展,针对Otway-Rees协议存在的缺陷,提出了改进方案。为了更好地描述改进协议,用SPALL系统对其安全属性进行了形式化描述,并做出安全分析。分析结果表明,改进协议能够确保密钥分发的正确性,并具有密钥机密性和强认证性,还能满足通信双方验证会话密钥一致性的要求。This paper presents a security protocol analysis by choosing the Otway-Rees protocol as the research object and using the improved BAN-like logic（ security protocol analysis latent logic,abbreviated to SPALL） as protocol analysis tool. It also extends SPALL,indicates the defects of the Otway-Rees protocol,and presents the amended protocol. Additionally SPALL is used to describe and analyze the safety of the protocol attribute formally. Finally,the conclusion is given that the amended protocol can ensure the correctness of key distribution,key confidentiality and strong authentication,and can satisfy the users by verifying the consistency of the session key.

关 键 词：安全协议 BAN类逻辑 形式化方法 OTWAY-REES协议 

分 类 号：TN918.1[电子电信—通信与信息系统]