Lecture Notes in Computer Science 2845 Edited by G. Goos, J. Hartmanis, and J. van Leeuwen

Transcription

1 Lecture Notes in Computer Science 2845 Edited by G. Goos, J. Hartmanis, and J. van Leeuwen

2 3 Berlin Heidelberg New York Hong Kong London Milan Paris Tokyo

3 Bruce Christianson James A. Malcolm Bruno Crispo Michael Roe (Eds.) Security Protocols 10th International Workshop Cambridge, UK, April 17-19, 2002 Revised Papers 13

4 Series Editors Gerhard Goos, Karlsruhe University, Germany Juris Hartmanis, Cornell University, NY, USA Jan van Leeuwen, Utrecht University, The Netherlands Volume Editors Bruce Christianson James A. Malcolm University of Hertfordshire, Computer Science Department Hatfield AL10 9AB, UK Bruno Crispo Vrije Universiteit De Boelelaan 1081a, 1081 HV Amsterdam, The Netherlands Michael Roe Microsoft Research Ltd. 7 J.J. Thomson Avenue, Cambridge CB3 0FB, UK mroe@mircosoft.com Cataloging-in-Publication Data applied for A catalog record for this book is available from the Library of Congress. Bibliographic information published by Die Deutsche Bibliothek Die Deutsche Bibliothek lists this publication in the Deutsche Nationalbibliografie; detailed bibliographic data is available in the Internet at < CR Subject Classification (1998): E.3, F.2.1-2, C.2, K.6.5, J.1, K.4.1, D.4.6 ISSN ISBN Springer-Verlag Berlin Heidelberg New York This work is subject to copyright. All rights are reserved, whether the whole or part of the material is concerned, specifically the rights of translation, reprinting, re-use of illustrations, recitation, broadcasting, reproduction on microfilms or in any other way, and storage in data banks. Duplication of this publication or parts thereof is permitted only under the provisions of the German Copyright Law of September 9, 1965, in its current version, and permission for use must always be obtained from Springer-Verlag. Violations are liable for prosecution under the German Copyright Law. Springer-Verlag is a part of Springer Science+Business Media springeronline.com c Springer-Verlag Berlin Heidelberg 2004 Printed in Germany Typesetting: Camera-ready by author, data conversion by PTP-Berlin, Protago-TeX-Production GmbH Printed on acid-free paper SPIN: /

5 Preface Once again we bring you the proceedings of the International Workshop on Security Protocols. It seems hard to believe that we have reached the tenth event in this annual series. This year our theme was Discerning the Protocol Participants. Security protocols are usually described in terms of the active participants Alice computes foo and sends it to Bob. However most security protocols also include off-line participants, which are not synchronously involved in the exchange of messages: a bank may participate on behalf of a customer, and an arbiter may subsequently be asked to interpret the meaning of a run. These silent partners to the protocol have their own security policies, and assumptions about identity, authorization and capability need to be re-examined when the agenda of a hidden participant may change. We hope that the position papers published here, which have been rewritten and rethought in the light of the discussions at the workshop, will be of interest, not just for the specific contributions they make but also for the deeper issues which they expose. In order to identify these issues more clearly, we include transcripts for some of the discussions which took place in Cambridge during the workshop. What would you have liked to add? Do let us know. As in past years, these proceedings also include a transcript of the keynote address given by Roger Needham. Alas, this is the last time. Roger s death during the preparation of these proceedings represents a loss, not only to us in the security community but indeed to the whole of computer science, of a magnitude that we are only just beginning to discern. In these proceedings, as in life, he has the last word. Our thanks to Sidney Sussex College, Cambridge for the use of their facilities, to Lori Klimaszewska of the University of Cambridge Computing Service for transcribing the audio tapes (in which fine grain cement at Wapping nearly proved a sticking point for concurrency) and to Johanna Hunt at the University of Hertfordshire for her assistance in editing the resulting Heraclitian texts. July 2003 Bruce Christianson Bruno Crispo James Malcolm Michael Roe

6 VI Previous Proceedings in This Series The proceedings of previous International Workshops on Security Protocols have also been published by Springer-Verlag as Lecture Notes in Computer Science, and are occasionally referred to in the text: 9th Workshop (2001), LNCS 2467, ISBN th Workshop (2000), LNCS 2133, ISBN th Workshop (1999), LNCS 1796, ISBN th Workshop (1998), LNCS 1550, ISBN th Workshop (1997), LNCS 1361, ISBN th Workshop (1996), LNCS 1189, ISBN

7 Table of Contents Introduction Bruce Christianson (Transcript)... 1 Keynote Address Roger M. Needham... 2 Weak Authentication: How to Authenticate Unknown Principals without Trusted Parties Jari Arkko and Pekka Nikander... 5 Discussion Is Entity Authentication Necessary? Chris J. Mitchell and Paulo S. Pagliusi Discussion A Structured Operational Modelling of the Dolev-Yao Threat Model Wenbo Mao...34 Discussion On Trust Establishment in Mobile Ad-Hoc Networks Laurent Eschenauer, Virgil D. Gligor, and John Barras...47 Discussion Legally Authorized and Unauthorized Digital Evidence Hiroshi Y oshiura, Kunihiko Miyazaki, Shinji Itoh, Kazuo Takaragi, and Ryoichi Sasaki...67 Discussion Shrink-Wrapped Optimism: The DODA Approach to Distributed Document Processing Bruce Christianson and Jean F. Snook Discussion Contractual Access Control Babak Sadighi F irozabadi and Marek Sergot Discussion Confidentiality Levels and Deliberate/Indeliberate Protocol Attacks Giampaolo Bella and Stefano Bistarelli Discussion

8 VIII Table of Contents Analyzing Delegation Properties Giampaolo Bella and Lawrence C. P aulson Discussion Combinatorial Optimization of Countermeasures against Illegal Copying Ryoichi Sasaki, Hiroshi Yoshiura, and Shinji Itoh Discussion Protocols with Certified-Transfer Servers Raphael Yahalom Discussion An Architecture for an Adaptive Intrusion-Tolerant Server Alfonso Valdes, Magnus Almgren, Steven Cheung, Yves Deswarte, Bruno Dutertre, Joshua Levy, Hassen Saïdi, Victoria Stavridou, and Tomás E. Uribe Discussion Supporting Imprecise Delegation in KeyNote Simon N. Foley Discussion Modelling Protocols for Secure Group Communications in Ad Hoc Networks Alec Y asinsac and James A. Davis Discussion Delegation of Signalling Rights Pekka Nikander and Jari Arkko Discussion Mobile IPv6 Security Tuomas Aura Discussion Concluding Discussion: Accounting for Resources All (Chair: Bruce Christianson) (Discussion) Back to the Beginning Roger M. Needham Author Index