Abstract:Trusted Platform Module (TPM) is a coprocessor for detecting platform integrity and attesting the integrity to the remote entity. There are two obstacles in the application of TPM: minimizing trusted computing base (TCB) for reducing risk of flaws in TCB, for which a number of convincing solutions have been developed; formal guarantees on each level of TCB, where the formal methods on analyzing the application level have not been well addressed. To the best of our knowledge, there is no general formal framework for developing the TPM-based protocol applications, which not only guarantees the security but also makes it easier for design. In this paper, we make fine-grained refinement on TPM-based security protocols to illustrate our formal solution on the application level by using the Event-B language. First, we modify the classical Dolev-Yao attacker model, which assumes normal entity's compliance with the protocol even without TPM's protection. Thus, the classical security protocols are vulnerable in this modified attacker model. Second, we make stepwise refinement of the security protocol by refining the protocol events and adding security constraints. From the fifth refinement, we make a case study to illustrate the entire refinement and further formally prove the key agreement protocol from DAAODV, the TPM-based routing protocol, under the extended Dolev-Yao attacker model. The refinement provides another way of formal modeling the TPM-based security protocols and a more fine-grained model to satisfy with the rigorous security requirement of applying TPM. Finally, we prove all the proof obligations generated by Rodin, an Eclipse-based IDE for Event-B, to ensure the soundness of our proposal.

Extentions to CSP and It's Application of Formal Technology of Protocols

Research on Formal Description of Protocols Based on CSP and RSL

Vulnerability Analysis of CSP Based on Stochastic Game Theory

Ensuring secure and robust grid applications – from a formal method point of view

Protocol Testing Theory Based on Formal Methods

A TTCN-3-based Protocol Testing System and Its Extension.

Research on Formal Description Techniques of Protocols Based on RSL

Formalization and verification of Kafka messaging mechanism using CSP

A System Analysis Approach for Protocol Test

Protocol Security Testing with SPIN and TTCN-3

A Formal Approach to Protocol Performance Testing.

The Certification Problem Format

From Verified Model to Executable Program: the PAT Approach

Application of High-level Design of Hardware with Timed CSP

An extension of authentication

Fine-Grained Refinement on TPM-Based Protocol Applications

A Formal Approach to Protocol Interoperability Testing

A Unifying Framework for Structural Properties of CSPs: Definitions, Complexity, Tractability

A Formal Method to Real-Time Protocol Interoperability Testing

Verification Tool for Security Protocol Based on GSPM

A Formal Specification and Verification Framework for Timed Security Protocols.