乐观公平交换协议的形式化分析技术研究-计算机应用技术专业论文.docxVIP

i万方数据 i 万方数据 摘 要 摘 要 乐观公平交换协议是一类典型的安全协议，用于在两个或多个主体之间安全、 高效地进行电子交易。与其它安全协议相比，乐观公平交换协议在结构上较为复杂， 从而更容易存在安全缺陷，同时也为其形式化分析带来了挑战。 本文主要研究了乐观公平交换协议的形式化分析技术，所取得的主要研究结果 有：（1）深入剖析了 IETF（Internet Engineering Task Force）的 IPSEC 工作组 提交的 IKEv2 协议草案；在对协议进行形式建模，以及应用 CTL 对相应的安全性质 进行形式描述的基础上，借助 SMV 分析了协议的认证性、秘密性、和完整性，发现 了两个攻击；对这两个攻击所产生的影响进行了讨论。（2）针对乐观公平交换协议， 提出了一种基于有限状态机的分析模型；应用该模型,借助 SMV 分析了 GJM 电子合 同签订协议，检测出由 V.Shmatikov 首先发现的缺陷；分析了 ASW 电子合同签订协 议，指出在协议实现过程中应该注意的问题；分析了 FPH 挂号电子邮件协议，发现 该协议存在安全缺陷。（3）针对所发现的安全缺陷，对 FPH 挂号电子邮件协议进行 了改进；应用上述模型，对改进后的协议进行模型检测分析，分析结果表明协议达 到了安全要求。（4）对 C.W.Hao 给出的协议运行模型及协议规格和分析框架进行扩 充和改进，给出了一个较为完整的安全协议规格及验证系统；应用该系统，对 ASW 电子合同签订协议进行了规格，对其公平性进行了逻辑推证。 关键词：乐观公平交换协议 IKE 协议 形式化分析 模型检测 逻辑推证 ii万方数据 ii 万方数据 Abstract Abstract The optimistic fair exchange protocol is a kind of typical security protocols, used for data exchanges between two or more protocol participants, in security and with high efficiency. Compared with other kinds of security protocols, the optimistic fair exchange protocol is more complicated, which mades it more error-prone and brings more challenges for its formal analysis. This dissertation studys using formal methods for analysis of optimistic fair exchange protocols, the main results that the author obtained are as follows: (1) The draft of the IKEv2 protocol submitted by the IPSEC Working Group of the Internet Engineering Task Force (IETF) is studied; A formal model for this protocol is developed, and some desired properties are specified using computational tree logic (CTL); Through the symbolic model checker—SMV, the authentication, secrecy, and integrity of this protocol are analyzed, and two attacks are discovered. (2) For the model checking analysis of optimistic fair exchange protocols, a model based on finite automata is proposed. Using this model, the GJM electronic contract signing protocol is analyzed and a flaw is discoved, which is discoved by V.Shmatikov in his early work too; The ASW electronic contract sign