摘要
随着网络技术的飞速发展，电子商务已成为大众广泛接受的一种商贸模式，越来越多的密码技术被广泛应用到电子商务安全协议中，形式化方法是一种行之有效的电子商务安全协议分析方法。针对原始串空间模型无法对密码学中一些复杂的操作作出描述和分析，通过扩展串空间模型，并在此基础上又相应扩展了认证测试方法，包括输入测试、输出测试以及自发测试的扩展，提出了一种基于丰富密码学的认证测试方法的扩展；最后分析了电子商务安全协议中的TLS1．0握手协议，验证了协议的认证属性。
With the rapid development of network technologies, e-commerce has become a widely accepted business model. Therefore, a growing number of cryptographic techniques are widely used in e-commerce security protocol, among which the formal method is an effective way of security protocol analysis. However, the original strand space model cannot make analyses and description of the more complex operations in cryptography primitives. By expanding it, we correspondingly expand the authentication test method, including incoming test, outgoing test and unsolicited test, and put forward a way to expand the authentication test method that is based on the rich cryptographic primitives. At last, we analyzes TLS 1. 0 handshaking protocol of e-commerce security protocols, and validate the authentication properties of the protocol.
出处
《苏州大学学报（工科版）》
CAS
2010年第4期60-65,共6页
Journal of Soochow University Engineering Science Edition (Bimonthly)
关键词
电子商务
安全协议
形式化方法
串空间模型
认证测试方法
e-commerce
security protocol
formal method
strand space model
authentication test method
