基于公鑰的層次化網絡安全協(xié)議設計

提出了一種基于公鑰的層次化網絡安全協(xié)議設計模型：協(xié)議的設計在若干層分別進行，
每一層子協(xié)議完成協(xié)議所要實現(xiàn)的一個子目標，并為上一層的子協(xié)議提供數據接口，然后將各層子協(xié)議依次合并起來，完成整個協(xié)議的設計。在以前的研究工作中，協(xié)議安全性總是被看作一個整體，給協(xié)議的設計與證明帶來極大的復雜性限制。層次化模型的使用簡化了安全協(xié)議設計的過程，使協(xié)議的設計更加清晰，代價更小，安全性證明也更為簡單。另外，所設計的協(xié)議具有更大的靈活性，可以適應各種應用系統(tǒng)的需求。
關鍵詞：安全協(xié)議，設計模型，層次化，公鑰
Abstract：This paper presents a layer-based model for security protocol design based on public key. That is, how to design security protocol by producing sub-protocols in several different layers. Every sub-protocol achieves a sub-goal derived from the protocol original goal and provides a data interface for the higher layer sub-protocol. Then we can obtain the design of the whole protocol by combining all the sub-protocols layer by layer. Using the layer-based model, whose basic idea goes against the common thought derived from the protocol authentication researches that security is regarded as an integral property, is very effective: it can make the entire security protocol design procedure clearer, more concise, and less expensive. Moreover, the layer differentiation simplifies the expression of authentication properties and diversifies the resulting design: this can be taken advantage of if we want to design different protocols meeting the requirements of different applications.
Keywords：security protocol, design model, layer-based, public key