基于公钥的层次化网络安全协议设计

提出了一种基于公钥的层次化网络安全协议设计模型：协议的设计在若干层分别进行，
每一层子协议完成协议所要实现的一个子目标，并为上一层的子协议提供数据接口，然后将各层子协议依次合并起来，完成整个协议的设计。在以前的研究工作中，协议安全性总是被看作一个整体，给协议的设计与证明带来极大的复杂性限制。层次化模型的使用简化了安全协议设计的过程，使协议的设计更加清晰，代价更小，安全性证明也更为简单。另外，所设计的协议具有更大的灵活性，可以适应各种应用系统的需求。
关键词：安全协议，设计模型，层次化，公钥
Abstract：This paper presents a layer-based model for security protocol design based on public key. That is, how to design security protocol by producing sub-protocols in several different layers. Every sub-protocol achieves a sub-goal derived from the protocol original goal and provides a data interface for the higher layer sub-protocol. Then we can obtain the design of the whole protocol by combining all the sub-protocols layer by layer. Using the layer-based model, whose basic idea goes against the common thought derived from the protocol authentication researches that security is regarded as an integral property, is very effective: it can make the entire security protocol design procedure clearer, more concise, and less expensive. Moreover, the layer differentiation simplifies the expression of authentication properties and diversifies the resulting design: this can be taken advantage of if we want to design different protocols meeting the requirements of different applications.
Keywords：security protocol, design model, layer-based, public key