Un modèle de validation automatique de mécanismes de sécurisation des communications

Mémoire numérisé par la Direction des bibliothèques de l'Université de Montréal

An Automatic Validation Model for Security Mechanisms

Copyright c �. HEC Montréal. Tous droits réservés pour tous pays. Toute traduction et toute reproduction sous quelque forme que ce soit est interdite

ISSN 0832-7203 An Automatic Validation Model

In this paper, we propose a model to automatically validate the composition of multiple security mechanisms in the context of transactions between multiple participants. The goal of the validation is to demonstrate that the different security mechanisms preserve conformity to their specifications when used in combination. The underlying principle of the proposed approach is illustrated with a case study in the context of e-commerce. Specifically, we show the combined use of a digital signature, which provides data integrity and non-repudiation, a digital certificate, which guaranties authentification of participants, and a symmetric cryptographic algorithm, which ensures confidentiality