Verifying authentication protocols: methodology and example

We present a new approach to the analysis of authenti-cation protocols. The approach consists of several elements: a speciication language for formally specifying authentication protocols, a semantic model for characterizing protocol executions, an assertion language for stating secrecy and correspondence properties, and procedures for verifying these properties. The main emphasis of this paper is on the assertion language, its semantics, and veriication procedures. In particular , we present a set of proof rules. We also present an example to illustrate our approach.