Formal Modeling of Security Policies for Mobile Access Solutions
[EN] Current technology allows us to have a great deal of computation power in the palm of our hand in the form of smartphones. Such powerful and versatile devices are the perfect tools to, e.g., authenticate users in both virtual and physical systems. Key2phone is a smartphone solution designed to...
| Autor: | |
|---|---|
| Tipo de recurso: | tesis de maestría |
| Fecha de publicación: | 2017 |
| País: | España |
| Institución: | Universitat Politècnica de València (UPV) |
| Repositorio: | RiuNet. Repositorio Institucional de la Universitat Politécnica de Valéncia |
| Idioma: | inglés |
| OAI Identifier: | oai:riunet.upv.es:10251/90225 |
| Acceso en línea: | https://riunet.upv.es/handle/10251/90225 |
| Access Level: | acceso abierto |
| Palabra clave: | Análisis y verificación Métodos formales en Ingeniería del software Seguridad Key2phone Maude LENGUAJES Y SISTEMAS INFORMATICOS Máster Universitario en Ingeniería y Tecnología de Sistemas Software-Màster Universitari en Enginyeria i Tecnologia de Sistemes Programari |
| Sumario: | [EN] Current technology allows us to have a great deal of computation power in the palm of our hand in the form of smartphones. Such powerful and versatile devices are the perfect tools to, e.g., authenticate users in both virtual and physical systems. Key2phone is a smartphone solution designed to facilitate authorized users to access restricted spaces by turning their smartphones into electronic keys. This master’s thesis focuses on the study of the safety and security properties of the Key2phone electronic lock. First, a model of the Key2phone protocol is implemented by using the Maude language, which is a high-performance reflective language and system supporting both equational and rewriting logic specification and programming. Then, a reachability analysis is performed in the Maude system, which ensures the safety of the system by proving that no states considered unsafe can be reached. Finally, liveness properties are checked by using the Maude LTL logical model checker (LMC). |
|---|