基于离线可信第三方的电子支付协议公平性分析

基于离线可信第三方的电子支付协议通常具有复杂结构,它由多个子协议组合而成,与传统认证协议有显著差别,主要表现在协议目标和攻击者模型两个方面.电子支付协议最主要目的是实现买卖双方的公平交换,同时假定交换双方都可能是不诚实的,需要考虑来自协议合法实体的内部攻击.在重新定义协议公平性和攻击者模型的基础上,提出扩展的串空间模型,以一个真实的电子支付协议为对象,演示了基于串空间理论的电子支付协议公平性形式化模型和分析方法,并指出该协议存在安全缺陷,提出改进意见.

Fairness analysis of electronic payment protocol based on offline TTP

The electronic payment protocol based on offline TTP is made up of multiple sub-protocols,and is significantly different from traditional authentication protocol,especially on protocol goal and penetrator model.The main purpose of the electronic payment protocol is to realize fair exchange between buyers and sellers who are assumed to be dishonest.Then,it is necessary for those buyers and sellers to prevent the internal attack.On the basis of redefining protocol fairness and penetrator model,an extended str...