PKI White Papers
Extending BAN Logic for Reasoning With Modern PKI-Based Protocols
Overview BAN Logic is a well-known authentication logic which, despite other more recent logics and formal methods, remains popular with many protocol designers. BAN Logic however does not properly deal with the issues of certificates and the use of Public Key Infrastructure (PKI). This paper proposes an extension to BAN Logic which focuses on certificate processing within the PKI setting. The extension is along the lines of the work by Gaarder and Snekkenes but better captures current aspects of PKI. In particular, the extension redresses the reasoning on the goodness of private keys, and considers certificate revocation. Common pitfalls in public-key based protocol design are due to insufficient attention placed on the "Intended recipient" as well as the "Stated sender" of a message.
| Publisher | National University of Singapore | File Format | |
|---|---|---|---|
| Date Published | August 2008 | ||
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful?
White Paper RSSData Security Mythbusters: Public Key Infrastructure (PKI)
DownloadIn today's business environment, enterprises must work even harder than before to protect one of their most valuable assets - their information. When facing the pressures of regulatory oversight, email...
Why Outsourcing Your PKI Provides the Best Value: A Total Cost of Ownership Analysis
Once one conclude that one needs a certificate to exchange information online securely, turn on the security inherent in existing applications, or authenticate to users, computers, VPN, the Web, or...
Sub-Prime PKI: Attacking Extended Validation SSL
One of the attributes that the paper discusses is the type of SSL certificate presented by a web server when negotiating a secure connection. Modern web browsers support both Domain...
PKI and UDDI Based Trust Centre: An Attempt to Improve Web Service Security
Nowadays Internet becomes the most used tool for the ever increasing amount of various transactions between institutions, organizations and more generally between clients and providers. Conducted studies and experiments showed...
VeriSign PKI-Based Certificates Are Rock Solid: From the Tumultuous Launch of the Integrated Cargo System to Today
Representing 250 customs brokers and freight forwarding businesses in Australia, the Customs Brokers and Forwarders Council of Australia Inc. (CBFCA) is an industry association that represents members' interests in various...
