提出了一種基于公鑰的層次化網(wǎng)絡(luò)安全協(xié)議設(shè)計(jì)模型：協(xié)議的設(shè)計(jì)在若干層分別進(jìn)行，
每一層子協(xié)議完成協(xié)議所要實(shí)現(xiàn)的一個(gè)子目標(biāo)，并為上一層的子協(xié)議提供數(shù)據(jù)接口，然后將各層子協(xié)議依次合并起來，完成整個(gè)協(xié)議的設(shè)計(jì)。在以前的研究工作中，協(xié)議安全性總是被看作一個(gè)整體，給協(xié)議的設(shè)計(jì)與證明帶來極大的復(fù)雜性限制。層次化模型的使用簡化了安全協(xié)議設(shè)計(jì)的過程，使協(xié)議的設(shè)計(jì)更加清晰，代價(jià)更小，安全性證明也更為簡單。另外，所設(shè)計(jì)的協(xié)議具有更大的靈活性，可以適應(yīng)各種應(yīng)用系統(tǒng)的需求。
關(guān)鍵詞：安全協(xié)議，設(shè)計(jì)模型，層次化，公鑰
Abstract：This paper presents a layer-based model for security protocol design based on public key. That is, how to design security protocol by producing sub-protocols in several different layers. Every sub-protocol achieves a sub-goal derived from the protocol original goal and provides a data interface for the higher layer sub-protocol. Then we can obtain the design of the whole protocol by combining all the sub-protocols layer by layer. Using the layer-based model, whose basic idea goes against the common thought derived from the protocol authentication researches that security is regarded as an integral property, is very effective: it can make the entire security protocol design procedure clearer, more concise, and less expensive. Moreover, the layer differentiation simplifies the expression of authentication properties and diversifies the resulting design: this can be taken advantage of if we want to design different protocols meeting the requirements of different applications.
Keywords：security protocol, design model, layer-based, public key