计算机工程与应用
計算機工程與應用
계산궤공정여응용
COMPUTER ENGINEERING AND APPLICATIONS
2015年
13期
86-91,152
,共7页
安全协议%形式化分析%串空间模型%认证测试%串参数
安全協議%形式化分析%串空間模型%認證測試%串參數
안전협의%형식화분석%천공간모형%인증측시%천삼수
security protocol%formal analysis method%strand space model%authentication test%strand parameters
针对认证测试基础理论在协议主体串参数一致性分析方面,因形式化判定规则不足所产生的分析复杂度较高和自动化程度较低问题,通过对消息组件结构的形式化,以及认证测试结构的共性分析,基于认证测试基础理论对认证测试结构进行形式化建模;在认证测试结构模型上,运用协议主体密钥的认证测试构造规则,分析协议主体串在不同类型参数上满足一致性的条件,在明确参数一致性判定规则的同时,给出协议主体串参数一致性分析的形式化方法。协议分析实践表明,该方法较传统方法不仅具有简洁高效、易于自动化实现的优点,而且能够准确定位协议缺陷并给出相应的修正方案。
針對認證測試基礎理論在協議主體串參數一緻性分析方麵,因形式化判定規則不足所產生的分析複雜度較高和自動化程度較低問題,通過對消息組件結構的形式化,以及認證測試結構的共性分析,基于認證測試基礎理論對認證測試結構進行形式化建模;在認證測試結構模型上,運用協議主體密鑰的認證測試構造規則,分析協議主體串在不同類型參數上滿足一緻性的條件,在明確參數一緻性判定規則的同時,給齣協議主體串參數一緻性分析的形式化方法。協議分析實踐錶明,該方法較傳統方法不僅具有簡潔高效、易于自動化實現的優點,而且能夠準確定位協議缺陷併給齣相應的脩正方案。
침대인증측시기출이론재협의주체천삼수일치성분석방면,인형식화판정규칙불족소산생적분석복잡도교고화자동화정도교저문제,통과대소식조건결구적형식화,이급인증측시결구적공성분석,기우인증측시기출이론대인증측시결구진행형식화건모;재인증측시결구모형상,운용협의주체밀약적인증측시구조규칙,분석협의주체천재불동류형삼수상만족일치성적조건,재명학삼수일치성판정규칙적동시,급출협의주체천삼수일치성분석적형식화방법。협의분석실천표명,해방법교전통방법불부구유간길고효、역우자동화실현적우점,이차능구준학정위협의결함병급출상응적수정방안。
In view of the problem of higher complexity and lower automation which lies in the basic theory of authentication test, generates for the lack of judgment rules used in the consistence analysis on the strands parameters of protocol principals, through formalizing the structure of message component, as well as analyzing the common grounds on the structure of authentication test, the formal modeling for the structure of authentication test is made based on the basic theory of authen-tication test. Upon the authentication test model, by using the construction rules in the keys of protocol principals, the anal-ysis is carried on the conditions which need to be met when the strands of protocol principals keep consistence on different types of parameter, as the judgment rules existing in the consistence of the strand parameters are found, the formal method used in the consistence analysis on the strand parameters of the protocol principals is gave out. Analyzing practice of pro-tocols indicates that the method is more concise and more effective, easier to be automated, compared to hypothetical deduction method, and can provide the corresponding correction scheme for the flaws which it accurately locates.