密码协议的一种基于组合推理的模型验证  

Model checking based on compositional reasoning for cryptographic protocols

作　　者：刘怡文[1] 李伟琴[1] 冯登国[2] 

机构地区：[1]北京航空航天大学计算机科学与工程系,北京100083 [2]中科院软件所信息安全国家重点实验室,北京100080

出　　处：《通信学报》2003年第9期122-127,共6页Journal on Communications

基　　金：国家"973"基金资助项目(G1999035802)

摘　　要：将密码协议与协议中用到的密码算法视为一个系统,基于组合推理技术建立了密码协议系统的形式化模型。采用基于假设/保证的组合推理技术提出了新的假设/保证推理规则和假设/保证推理算法,证明了该规则的正确性,实现了密码协议系统的模型验证,并重点解决了系统分解问题、假设函数的设定问题等难题。以kerberos v5密码协议系统为例,利用该组合推理技术对密码协议系统进行了安全验证。A cryptographic protocol together with its cryptographic algorithm was regarded as one system, and based on compositional reasoning techniques, a formal model for the system was built. Using assume-guarantee based compositional reasoning techniques, a new assume-guarantee based reasoning rule and algorithm were proposed, and the soundness of the rule was proved. In realizing model checking to the cryptographic protocol system, several difficulties were solved such as decomposition of the system and generation of assumed function. Using this formal model and assume- guarantee based reasoning techniques, the kerberos v5 cryptographic protocol system was verified.

关 键 词：密码协议 形式化模型 组合推理 模型检查 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]