Bayesian Authentication: Quantifying Security of the Hancke-Kuhn Protocol


Pavlovic, Dusko and Meadows, Catherine (2010) Bayesian Authentication: Quantifying Security of the Hancke-Kuhn Protocol. In: 26th Conference on the Mathematical Foundations of Programming Semantics, MFPS 2010, 6-10 May 2010, Ottawa, Ontario, Canada (pp. pp. 97-122).

[img] PDF
Restricted to UT campus only
: Request a copy
Abstract:As mobile devices pervade physical space, the familiar authentication patterns are becoming insufficient: besides entity authentication, many applications require, e.g., location authentication. Many interesting protocols have been proposed and implemented to provide such strengthened forms of authentication, but there are very few proofs that such protocols satisfy the required security properties. In some cases, the proofs can be provided in the symbolic model. More often, various physical factors invalidate the perfect cryptography assumption, and the symbolic model does not apply. In such cases, the protocol cannot be secure in an absolute logical sense, but only with a high probability. But while probabilistic reasoning is thus necessary, the analysis in the full computational model may not be warranted, since the protocol security does not depend on any computational assumptions, or on attacker's computational power, but only on some guessing chances.
We refine the Dolev-Yao algebraic method for protocol analysis by a probabilistic model of guessing, needed to analyze protocols that mix weak cryptography with physical properties of nonstandard communication channels. Applying this model, we provide a precise security proof for a proximity authentication protocol, due to Hancke and Kuhn, that uses probabilistic reasoning to achieve its goals.
Item Type:Conference or Workshop Item
Copyright:© 2010 Elsevier
Electrical Engineering, Mathematics and Computer Science (EEMCS)
Research Group:
Link to this item:
Official URL:
Export this item as:BibTeX
HTML Citation
Reference Manager


Repository Staff Only: item control page