Extending BAN Logic for Reasoning with Modern PKI-Based Protocols
Sufatrio
Roland Yap
Temasek Labs., Nat. Univ. of Singapore, Singapore;
This paper appears in: Network and Parallel Computing, 2008. NPC 2008. IFIP International Conference on
Publication Date: 18-21 Oct. 2008
On page(s): 190-197
Location: Shanghai,
ISBN: 978-0-7695-3354-4
INSPEC Accession Number: 10388114
Digital Object Identifier: 10.1109/NPC.2008.86
Current Version Published: 2008-10-31
Abstract
BAN logic is a well-known authentication logic which, despite other more recent logics and formal methods, remains popular with many protocol designers. BAN Logic however does not properly deal with the issues of certificates and the use of public key infrastructure (PKI). This paper proposes an extension to BAN logic which focuses on certificate processing within the PKI setting. Our extension is along the lines of the work by Gaarder and Snekkenes but better captures current aspects of PKI. In particular, our extension redresses the reasoning on the goodness of private keys, and considers certificate revocation. Common pitfalls in public-key based protocol design are due to insufficient attention placed on the "intended recipient" as well as the "stated sender" of a message. Our extension makes the recipient and sender explicit, which reduces the likelihood of introducing such flaws into the protocol and its subsequent proof using BAN Logic. In summary, our logic is primarily focused on making BAN logic more concise yet practical to use on PKI-based protocols.
Index
Terms
Available to subscribers and IEEE members.
References
Available to subscribers and IEEE members.
Citing Documents
Available to subscribers and IEEE members.
Cart
