普适环境中一种安全协议的设计及分析

普适环境需要满足“透明”“ 无需人干预的”性质,提出了一种普适计算环境下的安全协议——SPUE。它满足数据认证、数据新鲜性等安全特性,同时满足普适计算的“ 无需人干预的”性质。协议采用非对称密钥与对称密钥相结合的方法,在解决普适计算能量、计算能力限制同时增加了安全性,使其更适合于普适计算环境;同时运用通信顺序进程(CSP)方法对安全协议建模,采用FDR对模型进行检测,确保了协议能够满足各项安全性能。

Design and analysis of a security protocol for ubiquitous environments

"Unobtrusiveness" is the essential property of ubiquitous computing. We presented a Security Protocol for Ubiquitous Environments (SPUE), which provided data authentication, and data freshness besides unobtrusiveness. Using both asymmetric-key and symmetric-key algorithms made the protocol more secure and enough for severe resource constraints, limited computation, memory, and communication capacities. Furthermore, with modeling the protocol by Communicating Sequential Processes (CSP) method and checking it with Failures Divergence's Refinement (FDR), it has been verified that security properties can be guaranteed.