计算机科学 ›› 2010, Vol. 37 ›› Issue (8): 56-60.

• 计算机网络与信息安全 • 上一篇    下一篇

一种新的电子商务协议分析方法

郭华,李舟军,庄雷,计宏霖   

  1. (北京航空航天大学计算机学院 北京100083);(郑州大学信息工程学院 郑州450052);(信息工程大学信息工程学院 郑州450002)
  • 出版日期:2018-12-01 发布日期:2018-12-01
  • 基金资助:
    本文受国家自然科学基金项目(60473057,60973105),北京航空航天大学博士生创新基金(211619)资助。

New Approach for Analyzing of E-commerce Protocol

GUO Hua,LI Zhou-jun,ZHUANG Lei,JI Hong-lin   

  • Online:2018-12-01 Published:2018-12-01

摘要: 基于卿一周逻辑给出了一些新的逻辑推理规则,并提出了一种扩展的通信有限状态自动机,用于分析电子商务协议的安全性质。该方法可描述协议参与者的行为与知识,且无需人为地引入初始假设。对扩展模型抽象并修改后,还可验证其它一些与加密、签名消息无关的性质。利用该方法分析了匿名可恢复的公平交换协议,发现其满足有效性、公平性、可追究性,但不满足匿名性,并用UPPAAL验证了协议的公平性、活性与时效性等。

关键词: 电子商务协议,模型检测,逻辑分析,通信有限状态自动机

Abstract: This paper presented an extended CSFM by combining communication finite state machine(CSFM) with some new logic rules based on Qing-Zhou logic to analyze security properties of E-commerce protocols. It not only can describe the knowledge and behavior of participants, but also analyze the security properties without initial state assumptions. In addition, this method enables us to verity other security properties after abstracting and modifying the model. Using this method,accountability,fairness and atomicity were analyzed to be satisfied in the anonymous and failure resilient fair-exchange ecommerce protocol. Then UPPAAL was used to verify the properties of fairness, liveness and timeliness.

Key words: E-commerce protocol, Model checking, Logic proving, Communication finite state machine

No related articles found!
Viewed
Full text


Abstract

Cited

  Shared   
  Discussed   
No Suggested Reading articles found!