• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

J4 ›› 2007, Vol. 29 ›› Issue (10): 82-84.

• 论文 • 上一篇    下一篇

基于模型检测的不可靠环境下电子商务协议分析

马怀磊[1] 郭华[2] 庄雷[1]   

  • 出版日期:2007-10-01 发布日期:2010-06-02

  • Online:2007-10-01 Published:2010-06-02

摘要:

随着网络的大规模应用,电子商务协议的运行环境越来越不可靠。本文用模型检测的方法分析了不可靠环境下电子商务协议的安全性质。结果表明:安全的电子商务协议在不  可靠环境下运行时有可能不再保持安全性质。当安全性质违背时,借助由自动验证工具UPPAAL生成的消息序列查找原因并对协议进行修改。经验证,修改后的协议在不可靠的环
 境下保持安全性质。

关键词: 电子商务协议 不可靠环境 模型检测 原子性 UPPAAL

Abstract:

With the wide application of the Internet, the environment of e-commerce protocols becomes more and more unreliable. We analyse the security of e-comm erce protocols in failure environments using the model checking approach. Our conclusion is that the security properties of an e-commerce protocol may be violated in the presence of site or communication failures. We evaluate which failures cause the violation of one or more of the properties according   to the message sequence which is produced by the model checking tool UPPAAL. The amended protocol retains the security properties.

Key words: (e-commerce protocol, failure environment, model checking, atomicity, UPPAAL)