一种OSA/Parlay鉴权接口的安全性研究

本文讨论了基于TSM 架构的OSA/Parlay 框架，分析了TSM 的OSA/Parlay 框架中的
鉴权安全性，结合现有的两种常用TSM 安全分析模型的优点，提出了新的TSM 正规模型，并用CoProVe 对其进行追踪分析，发现了TSM 协议安全上的不足，最后，提出了相应的解决方法。
关键词：下一代网络；可信安全管理； 解决方法
A Research on the Security of OSA/Parlay Authentication Interface Yang Xun1 Wan Xiao-Yu1 Huang Yong2 Fan Zi-Fu1 (1. Next Generation Network Application Technology Institute of CQUPT, Chongqing， China 400065 2. ChongQing PuTian Communication Equipment Co.,Ltd, Chongqing，China 400039） Abstract ：In this paper, first, the OSA/Parlay framework based on the TSM architecture is discussed and the security of the authentication in the framework is analyzed. Then, a new TSM formal security model which combined the advantages of the two current TSM models is presented. Finally, by tracing analyses with CoProVe, the security flaws of the TSM protocol are detected, and the corresponding solutions for the flaws are brought up.
Keywords：NGN； TSM； solutions