Authentication tests and disjoint encryption: A design method for security protocols^*

Issue title: Special issue on CSFW15

Guest editors: S. Schneider

Article type: Research Article

Authors: Guttman, Joshua D.

Affiliations: The MITRE Corporation, Bedford, MA 01730-1420, USA. E-mail: guttman@mitre.org

Note: [*] Supported by the National Security Agency. An earlier version appears in Proceedings, 15th IEEE Computer Security Foundations Workshop, IEEE CS Press, June 2002.

Abstract: We describe a protocol design process, and illustrate its use by creating ATSPECT, an Authentication Test-based Secure Protocol for Electronic Commerce Transactions. The design process is organized around the authentication tests, a method for protocol verification based on the strand space theory. The authentication tests dictate how randomly generated values such as nonces may be combined with encryption to achieve authentication and freshness. ATSPECT offers functionality and security guarantees akin to the purchase request, payment authorization, and payment capture phases of SET, the secure electronic transaction standard created by the major credit card firms.

DOI: 10.3233/JCS-2004-123-405

Journal: Journal of Computer Security, vol. 12, no. 3-4, pp. 409-433, 2004