Security protocol design via authentication tests

J.D. Guttman
Proceedings 15th IEEE Computer Security Foundations Workshop. CSFW-15  
We describe a protocol design process, and illustrate its use by creating ATSPECT, an Authentication Test-based Secure Protocol for Electronic Commerce Transactions. The design process is organized around the authentication tests, a method for protocol verification based on the strand space theory. The authentication tests dictate how randomly generated values such as nonces may be combined with encryption to achieve authentication and freshness. ATSPECT offers functionality and security
more » ... ees akin to the purchase request, payment authorization, and payment capture phases of SET, the secure electronic transaction standard created by the major credit card firms.
doi:10.1109/csfw.2002.1021809 dblp:conf/csfw/Guttman02 fatcat:xfeb6dk7vzgntensueonx74bye