SPKI的逻辑重构
A logical reconstruction of SPKI
摘要:
SPKI/SDSI是一个建议的公钥基础设施标准,它包含了SDSI公钥基础设施。SDSI的主要创新是使用当地名称。我们之前介绍了本地名称包含逻辑,它具有清晰的语义,并被证明可以完全表征SDSI名称解析。在这里,我们将展示如何扩展我们以前的方法来处理SPKI的一些关键功能,包括撤销,到期日期和元组减少。我们表明,这些扩展添加相对较小的复杂性的逻辑。特别是,我们不需要非单调逻辑来捕获撤销。然后,我们使用我们的语义检查SPKI的元组减少规则。我们的分析突出的地方SPKI的元组减少的非正式描述是有点模糊,并表明,额外的减少规则是必要的,以捕捉有关绑定和授权的一般信息。
英文摘要:
SPKI/SDSI is a proposed public key infrastructure standard that incorporates the SDSI public key infrastructure. SDSI's key innovation was the use of local names. We previously introduced a Logic of Local Name Containment that has a clear semantics and was shown to completely characterize SDSI name resolution. Here we show how our earlier approach can be extended to deal with a number of key features of SPKI, including revocation, expiry dates, and tuple reduction. We show that these extensions add relatively little complexity to the logic. In particular, we do not need a nonmonotonic logic to capture revocation. We then use our semantics to examine SPKI's tuple reduction rules. Our analysis highlights places where SPKI's informal description of tuple reduction is somewhat vague, and shows that extra reduction rules are necessary in order to capture general information about binding and authorization.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。