认证测试是一种用于证明安全协议认证属性的新方法,该方法能够简化协议认证属性的证明过程,但其局限性是无法应用于认证测试元素被多重加密的情况.指出Perrig和Song提出的认证测试改进方案在多个方面所存在的问题.在此基础上提出新的改进方案,并进行了形式化证明.新的认证测试定理突破了认证测试元素在整个协议消息中不能被加密的限制,扩展了认证测试理论的应用范围.
Authentication test is a newly presented method that testifies protocols' authentication properties. Its proving process is simple and precise; unfortunately it can not analyze protocols with test components multi-encrypted. This paper analyzes the authentication test scheme improved by Perrig and Song and points out its deficiency. Then it proposes an Enhanced Authentication Test theory and proves its soundness in formal. The enhanced authentication test lifts the restriction that test component can not be multi-encrypted in protocol messages, also repairs the inaccuracies in Perrig's scheme.