DOCSLIB.ORG

Information Technology 1 and 2

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Information Technology 1 and 2 OCCASION This publication has been made available to the public on the occasion of the 50th anniversary of the United Nations Industrial Development Organisation. DISCLAIMER This document has been produced without formal United Nations editing. The designations employed and the presentation of the material in this document do not imply the expression of any opinion whatsoever on the part of the Secretariat of the United Nations Industrial Development Organization (UNIDO) concerning the legal status of any country, territory, city or area or of its authorities, or concerning the delimitation of its frontiers or boundaries, or its economic system or degree of development. Designations such as “developed”, “industrialized” and “developing” are intended for statistical convenience and do not necessarily express a judgment about the stage reached by a particular country or area in the development process. Mention of firm names or commercial products does not constitute an endorsement by UNIDO. FAIR USE POLICY Any part of this publication may be quoted and referenced for educational and research purposes without additional permission from UNIDO. However, those who make use of quoting and referencing this publication are requested to follow the Fair Use Policy of giving due credit to UNIDO. CONTACT Please contact [email protected] for further information concerning UNIDO publications. For more information about UNIDO, please visit us at www.unido.org UNITED NATIONS INDUSTRIAL DEVELOPMENT ORGANIZATION Vienna International Centre, P.O. Box 300, 1400 Vienna, Austria Tel: (+43-1) 26026-0 · www.unido.org · [email protected] (vJ, fOp. ZL 114 EMERGING TECHNOLOGY SERIES 1and2/1998 Info1mation Technology ~~ UNITED •NATIONS INDUSTRIAL DEVEWPMENT ORGANIZATION Vienna, 1998 TO OUR READERS I EMERGING I TECHNOLOGY . SERIES With the continuing importance and penetration of the Internet into all countries, readers will have noticed an increasing number of articles in the Emerging Technology Series: INFORMATION Information Technology dealing with different aspects of TECHNOLOGY Internet use. In UNIDO we are particularly concerned with the 1 & 2/1998 use of information and communication technologies to support the growth of small and medium-sized enterprises (SMEs) in developing countries. CONTENTS In order to accelerate the growth and competitiveness of SMEs, SPECIAL ARTICLE it is necessary for them to have easy access to information on, LEGAL ASPECTS OF for example, skills, available financing, technology, markets and INTELECTUAL PROPERTY raw material supplies. They also need easy access to all the PROTECTION IN RUSSIA value-added or support services that are already available at by Guennadi Kleimenov national, regional and international levels. The problem faced in NEWS AND EVENTS most countries is that services to industry are typically little known and often ineffective; there is much duplication of effort; NEW DEVELOPMENTS knowledge in existing institutions does not reach or impact the MARKET TRENDS AND private sector; and SMEs do not yet realize the importance of COMPANY NEWS information and value-added services for increasing competitiveness, or are even not aware of their existence. APPLICATIONS SOFTWARE UNIDO's response to this problem is to assist countries to build up their national capabilities to use networking to support COUNTRY NEWS business processes in a commercially sustainable way. This involves bringing the public and private sectors together to build STANDARDIZATION & up an effective networking system of existing sources of LEGISLATION information and support services, both at national and international levels. RECENT PUBLICATIONS The major functions of such networks can be summarized as UNIDO's Emerging TechnologrSeries is follows: established as a mechanism o current awareness to monitor developments in the microelectronics sector and inform • Providing easy access to all existing information and value­ governments, industry and academia, primarily in developing countries. added or support services in a country; The Series on Information Technology is • Promoting all the existing services to their clients; issues four times a year and distributed free of charge to readers in developing • Providing a window for the international business countries. It is not a formal document and community on how to do business in a country and on has been reproduced without formal editing Opinions expressed here do not available business opportunities; necessarily reflect the views of UNIDO. Mention of the names of firms and • Ensuring a wider audience can utilize the Internet; commercial products does not imply an endorsement by UNIDO. Copyrighted • Providing training in the use of information and material reproduced in the Series may be communication technologies for business; quoted only with permission of the Journals concerned. Other material may • Providing an easy way to exchange information with be quoted or reproduced without further permission. Due acknowledgement is neighbouring countries and thus promoting South-South requested. cooperation; Scientific Editor: Paul H. Makin • Acting as a fee-based one-stop, non-stop shop for Compiled and edited: Diana Rhind information and support services. Editorial Board: V. Podshiby(l.kin; P. H. Makin; A. Spina; C. Gurk6k. Published in 1998 by the United Nations In future issues of the Emerging Technology Series: Information Industrial Development Organization Technology we will be providing more information on the (UNIDO) Industrial Information Section (ITPD) approach UNIDO takes to networking together with some Vienna International Centre P.O. Box 300 successful case studies. A·1400 Vienna Austria Tel.. (43·1) 26026·3736 Fax ( 43· 1 ) 26026·6843 e-mail: [email protected] Paul H. Makin Printed in Austna Scientific Editor Information Technology, 1 and 211998 CONTENTS Page Page A. SPECIAL ARTICLE ................. 1 The role of intermediaries in electronic publishing . 16 Legal Aspects of Intellectual Property Protection Millennium compliance . 16 in Russia ............................... 1 Beyond the Year 2000 . 16 Problems associated with the millennium . 17 1. Real dangers: bears or pirates? .......... lnformetric analyses on the World Wide Web 17 2. Kinds of piracy and the ways of introducing Esprit and 13001 launch 300 mm joint projects 17 the pirated products into the Russian market 2 Internet2 . 17 3. Establishment of an intellectual property Computer telephony . 17 protection system in the Russian Federation . 2 Internet telephony . 18 4. How to protect copyright in Russia ........ 3 Information gap . 18 5. Conclusion . 4 C. NEW DEVELOPMENTS • • • . 19 B. NEWS AND EVENTS . 6 IBM enhances wireless networks . 19 Viritual work: the challenge oftelework .... 6 High-throughput X-ray inspection . 19 Teleworking .......................... 6 Conductive concrete . 19 Death to the chip ...................... 6 Californians develop methanol fuel cell . 19 An information science manifesto ......... : 7 A one-lattice-fits-all substrate on the way . 20 Knowledge management: competitive advantage Classy glass twists light . 20 for the 21st century .................. 7 An added dimension in display technology 21 Three golden rules for developing an Shrinking sensor technology . 21 information management strategy ....... 7 Intel supercomputer achieves 1.34 Tflops . 21 Human testing for mobile risk ............ 7 Polymer diode can switch on any colour 21 Ion-projection lithography ............... 8 Forces that could blow nanochips apart . 22 Internet via electricity supply ............. 8 Room temperature quantum material is bathed Inter, intra, extranet: the third wave ........ 8 in gold . 22 Best practices for telematics applications .... 8 Sitting on fuel cell technology . 23 Additions to IMF ...................... 9 Observation of electric fields of ferroelectric World service ......................... 9 substances by electron beam holography . 23 Proposal to adopt GSM alternative technology 9 World's first rewritable optical head Achieving a roaming point of presence on for DVD-RAMs . 23 the Internet . .. 9 Compressed digital output CMOS image Legal information needs of the general public: sensor with analog 2-D DCT processor with special reference to developing countries 9 and ADC/quantizer . 24 The use of satellite and CD technology to Tripping the light at fantastic speeds . 24 speed up Web surfing ................ 10 "World's smallest" serial EEPROM ISDN vs. DSL and cable modems ......... IO introduced . 24 IP addressing: playing thenumbers ........ IO A new solution for heat management . 25 Online news options to fit information needs Electro-optic terahertz sensing . 25 and equipment ...................... 10 ABB's new power semiconductor . 25 ZDNet ............................... 11 TI 0.18 µm CMOS process packs in 250 m Sci-tech information on the Web ......... 11 transistors . 25 Abstract information ................... 11 BT 40 Gbit/s LAN . 25 The Internet: part of a professional searcher's Vertical-cavity surface-emitting laser toolkit . 11 (VCSEL) for parallel, large-capacity Solar power will be viable option . 12 optical communications . 25 First worldwide Internet telephony system . 12 Charge modulation device image sensor of Comparison of pricing structures of information 12 4 million pixels . 26 Mainframes are back . 12 GeneChip fabrication . 26 TCO and the NC . 13 Successful production of thin wire by arranging Managed networks .................... 13 indium atoms . 27 New technologies
Load more

Recommended publications
  • Optimizing the Block Cipher Resource Overhead at the Link Layer Security Framework in the Wireless Sensor Networks
    Proceedings of the World Congress on Engineering 2008 Vol I WCE 2008, July 2 - 4, 2008, London, U.K. Optimizing the Block Cipher Resource Overhead at the Link Layer Security Framework in the Wireless Sensor Networks Devesh C. Jinwala, Dhiren R. Patel and Kankar S. Dasgupta, data collected from different sensor nodes. Since the Abstract—The security requirements in Wireless Sensor processing of the data is done on-the-fly, while being Networks (WSNs) and the mechanisms to support the transmitted to the base station; the overall communication requirements, demand a critical examination. Therefore, the costs are reduced [2]. Due to the multi-hop communication security protocols employed in WSNs should be so designed, as and the in-network processing demanding applications, the to yield the optimum performance. The efficiency of the block cipher is, one of the important factors in leveraging the conventional end-to-end security mechanisms are not performance of any security protocol. feasible for the WSN [3]. Hence, the use of the standard In this paper, therefore, we focus on the issue of optimizing end-to-end security protocols like SSH, SSL [4] or IPSec [5] the security vs. performance tradeoff in the security protocols in WSN environment is rejected. Instead, appropriate link in WSNs. As part of the exercise, we evaluate the storage layer security architecture, with low associated overhead is requirements of the block ciphers viz. the Advanced Encryption required. Standard (AES) cipher Rijndael, the Corrected Block Tiny Encryption Algorithm (XXTEA) using the Output Codebook There are a number of research attempts that aim to do so.
    [Show full text]
  • Roger Needham
    The Marshall Symposium: Address: Roger Needham Table of Contents Participants The Marshall Philip Power: Good morning. In remorseless pursuit of our Scholarships timetable, which envisages a busy and crowded day, I think that it's time to get going. Home Welcome to the second session of the Marshall Symposium. I'd like to get some housekeeping matters out of the way. For those of you who don't have programs, they are available in the lobby. There will be a fifteen-minute break between the first and the second panel, at approximately ten forty-five. There will be coffee and pop available in the lobby, but we will resume our panel discussions promptly at eleven. We are hopeful of provoking as much interplay between our panels and the audience as we can. To facilitate that, there are microphones at each aisle, and so at the end of panels, people are encouraged and invited to ask questions. Our morning speaker is a most distinguished trans-Atlantic visitor who suffered the indignities inflicted on many airline travelers at the hands of Northwest Airlines and its associated unions. Roger Needham, who is a pro-vice chancellor of Cambridge University, was born in 1935 and has been in computing at Cambridge since 1956. His Ph.D. thesis in 1961 concerned the application of digital computers to problems of classification and grouping. In 1962, he joined the computer laboratory, which was then called the mathematical laboratory, and has been on the faculty since 1963. He took a leading role in Cambridge projects in operating systems, in time-sharing systems, in memory protection, in local area networks and in distributed systems over the next twenty years.
    [Show full text]
  • An Interview with Tony Hoare ACM 1980 A.M. Turing Award Recipient
    1 An Interview with 2 Tony Hoare 3 ACM 1980 A.M. Turing Award Recipient 4 (Interviewer: Cliff Jones, Newcastle University) 5 At Tony’s home in Cambridge 6 November 24, 2015 7 8 9 10 CJ = Cliff Jones (Interviewer) 11 12 TH = Tony Hoare, 1980 A.M. Turing Award Recipient 13 14 CJ: This is a video interview of Tony Hoare for the ACM Turing Award Winners project. 15 Tony received the award in 1980. My name is Cliff Jones and my aim is to suggest 16 an order that might help the audience understand Tony’s long, varied, and influential 17 career. The date today is November 24th, 2015, and we’re sitting in Tony and Jill’s 18 house in Cambridge, UK. 19 20 Tony, I wonder if we could just start by clarifying your name. Initials ‘C. A. R.’, but 21 always ‘Tony’. 22 23 TH: My original name with which I was baptised was Charles Antony Richard Hoare. 24 And originally my parents called me ‘Charles Antony’, but they abbreviated that 25 quite quickly to ‘Antony’. My family always called me ‘Antony’, but when I went to 26 school, I think I moved informally to ‘Tony’. And I didn’t move officially to ‘Tony’ 27 until I retired and I thought ‘Sir Tony’ would sound better than ‘Sir Antony’. 28 29 CJ: Right. If you agree, I’d like to structure the discussion around the year 1980 when 30 you got the Turing Award. I think it would be useful for the audience to understand 31 just how much you’ve done since that award.
    [Show full text]
  • Obituary Karen Spärck Jones
    Obituary Karen Sp¨arck Jones ∗ John I. Tait University of Sunderland Karen Sparck¨ Jones died peacefully on 4 April 2007 after a number of months battling cancer. Karen was President of the Association for Computation Linguistics in 1994 during a difficult period, and saw through a transitional phase in which a solid basis for the long-term health of the association was established. Karen was an exceptional individual who made very substantial contributions in two separate fields, computational linguistics (CL) and information retrieval (IR), as well as in computing and artificial intelligence more broadly. In IR, her greatest contri- bution was probably her invention (1972) of the concept of inverse document frequency (IDF), in which the importance of terms is weighted according to the proportion of documents in the corpus in which they occur; the intuition being that terms which occur in many documents are poor index terms. This is the partial basis of all weighting schemes adopted by widely used Internet search engines, and will undoubtedly be a lasting contribution to the field. Her primary inspiration and interest was always language, especially language in practical use. Her long involvement with IR arose (as someone who subsisted for an inordinately long time on soft money) by the need to find a new line of research in the aftermath of the ALPAC Report and the subsequent difficulties in getting machine translation work funded. However, she was always well qualified to work in IR, a topic addressed in her very early publications (see, for example, Masterman, Needham, and Sparck¨ Jones 1958), although in a rather different context to her later work.
    [Show full text]
  • 2017 USENIX Vail Computer Elements Workshop
    2017 USENIX Vail Computer Elements Workshop The USENIX Vail Computer Elements Workshop is a unique four day workshop that has been around for 47 years serving leading architects of the computer industry. This intentionally small workshop is intended to allow a lively interaction between the participants and the speakers. The agenda is 100% invited technical talks and the audience is mostly previous speakers. Past keynotes have been Seymour Cray, Gordon Moore, Burton Smith, and Ivan Sutherland. The workshop will be held June 18 - 21, 2017 at the Christiania at Vail. Keynote This year's Keynote will be Rebuilding the Cambridge EDSAC by Andrew Herbert Bio Herbert received his Ph.D. in Computer Science from Cambridge University in 1978 for his work on “A Microprogrammed Operating System Kernel” and worked with Maurice Wilkes and Roger Needham and others on the “Cambridge Model Distributed System”. Later he joined Microsoft Research Cambridge as managing director and chairman of Microsoft Research EMEA. Herbert was appointed Officer of the Order of the British Empire (OBE) in the 2010 New Year Honours, and is a Fellow of the Royal Academy of Engineering. Now in retirement, Herbert is the director of a project to construct a working replica of the Cambridge EDSAC computer. Registration is open here. Preliminary Program Next generation Atom core Intel Nervana - Deep Learning processor Intel Nano-Engineered Computing Systems Technology, or N3XT Stanford IBM Power9 IBM OpenCAPI IBM Ryzen - AMD's new core AMD Intel's 3DNAND and 3DXP storage class
    [Show full text]
  • Original File Was Jvis Final.Tex
    KSII TRANSACTIONS ON INTERNET AND INFORMATION SYSTEMS VOL. 14, NO. 2, Feb. 2020 724 Copyright ⓒ 2020 KSII IP Design of Corrected Block TEA Cipher with Variable-Length Message for Smart IoT Hyeopgoo Yeo1, Seungil Sonh1*, Mingoo Kang2 1 Division of Information & Telecommunications, Hanshin University Osan-si, Gyeonggi-do, 18101 - Korea [e-mail: [email protected]] [e-mail: [email protected]] 2 Dept. of IT Contents, Hanshin University Osan-si, Gyeonggi-do, 18101 - Korea [e-mail: kangmg@ hs.ac.kr ] *Corresponding author:Seungil Sonh Received August 14, 2019; revised October 17, 2019; accepted November 12, 2019; published February 29, 2020 Abstract Corrected Block TEA(or XXTEA) is a block cipher designed to correct security weakness in the original block TEA in 1998. In this paper, XXTEA cipher hardware which can encrypt or decrypt between 64-bit and 256-bit messages using 128-bit master key is implemented. Minimum message block size is 64-bit wide and maximal message block size is 256-bit wide. The designed XXTEA can encrypt and decrypt variable-length message blocks which are some arbitrary multiple of 32 bits in message block sizes. XXTEA core of this paper is described using Verilog-HDL and downloaded on Vertex4. The operation frequency is 177MHz. The maximum throughput for 64-bit message blocks is 174Mbps and that of 256-bit message blocks is 467Mbps. The cryptographic IP of this paper is applicable as security module of the mobile areas such as smart card, internet banking, e-commerce and IoT. Keywords: Corrected Block TEA(XXTEA), Symmetric Block Cipher, Encryption, Decryption This research was supported by a research grant from Hanshin Unersity.
    [Show full text]
  • Professor Sir Tony Hoare Interviewed by Dr
    IN PARTNERSHIP WITH NATIONAL LIFE STORIES AN ORAL HISTORY OF BRITISH SCIENCE Professor Sir Tony Hoare Interviewed by Dr Thomas Lean C1379/52 © The British Library Board http://sounds.bl.uk This interview and transcript is accessible via http://sounds.bl.uk . © The British Library Board. Please refer to the Oral History curators at the British Library prior to any publication or broadcast from this document. Oral History The British Library 96 Euston Road London NW1 2DB United Kingdom +44 (0)20 7412 7404 [email protected] Every effort is made to ensure the accuracy of this transcript, however no transcript is an exact translation of the spoken word, and this document is intended to be a guide to the original recording, not replace it. Should you find any errors please inform the Oral History curators. © The British Library Board http://sounds.bl.uk The British Library National Life Stories Interview Summary Sheet Title Page Ref no: C1379/52 Collection title: An Oral History of British Science Interviewee’s Hoare Title: Professor Sir surname: Interviewee’s Tony Sex: Male forename: (Charles Anthony Richard) Occupation: Computer scientist Date and place of birth: Mother’s Father’s occupation: Colonial civil servant occupation: Dates of recording, Compact flash cards used, tracks (from – to): 17/05/2011 (1-3), 08/09/2011 (4-6), 12/10/2011 (7-8), 12/12/2011 (9-10), 09/01/2012 (11- 13),27/02/2012 (14-15) Location of Interviewee’s home, Cambridge. interview: Name of Thomas Lean interviewer: Type of recorder: Marantz PMD661 on secure digital Recording format : WAV 24 bit 48 kHz Total no.
    [Show full text]
  • A Security Policy Model for Clinical Information Systems
    A Security Policy Mo del for Clinical Information Systems Ross J Anderson University of Cambridge Computer Lab oratory Pembroke Street Cambridge CB QG rossandersonclcamacuk Abstract up a numb er of centralised applications that will use it One of them will centralise the billing of hospital The protection of personal health information has treatment in a single system that will pro cess large become a live issue in a number of countries including amounts of p ersonal health information and make the USA Canada Britain and Germany The debate various analyses available to administrators Do ctors has shown that there is widespread confusion about will remain resp onsible for the security of clinical in what should be protected and why Designers of mil formation which they originate yet the do ctors main itary and banking systems can refer to Bel lLaPadula professional organisation the British Medical Asso and ClarkWilson respectively but there is no com ciation BMA has b een refused information ab out parable security policy model that spel ls out clear and the security mechanisms that are supp osed to protect concise access rules for clinical information systems patient information on the new network and its appli In this article we present just such a model It cations was commissioned by doctors and is driven by medical It also b ecame clear that there was much confu ethics it is informed by the actual threats to privacy sion ab out the actual threats and ab out the protec and reects current best clinical practice Its eect tion measures
    [Show full text]
  • A Secure and Efficient Lightweight Symmetric Encryption Scheme For
    S S symmetry Article A Secure and Efficient Lightweight Symmetric Encryption Scheme for Transfer of Text Files between Embedded IoT Devices Sreeja Rajesh 1, Varghese Paul 2, Varun G. Menon 3,* and Mohammad R. Khosravi 4 1 Department of Computer Science, Bharathiar University, Coimbatore 641046, Tamil Nadu, India; [email protected] 2 Department of Information Technology, Cochin University of Science and Technology, Ernakulam 682022, Kerala, India; [email protected] 3 Department of Computer Science and Engineering, SCMS School of Engineering and Technology, Ernakulam 683582, Kerala, India 4 Department of Electrical and Electronic Engineering, Shiraz University of Technology, Shiraz 71555-313, Iran; [email protected] * Correspondence: [email protected]; Tel.: +918714504684 Received: 29 January 2019; Accepted: 20 February 2019; Published: 24 February 2019 Abstract: Recent advancements in wireless technology have created an exponential rise in the number of connected devices leading to the internet of things (IoT) revolution. Large amounts of data are captured, processed and transmitted through the network by these embedded devices. Security of the transmitted data is a major area of concern in IoT networks. Numerous encryption algorithms have been proposed in these years to ensure security of transmitted data through the IoT network. Tiny encryption algorithm (TEA) is the most attractive among all, with its lower memory utilization and ease of implementation on both hardware and software scales. But one of the major issues of TEA and its numerous developed versions is the usage of the same key through all rounds of encryption, which yields a reduced security evident from the avalanche effect of the algorithm.
    [Show full text]
  • CS 261 Scribe Notes Crypto Protocols
    CS 261 Scribe Notes Crypto Protocols Instructor: Prof. David Wagner Scribe: Mayank April 16, 2021 1. Designing Cryptographic Protocols Back in the 90’s, there was a lot of research focus on designing secure cryptographic protocols. However, many of these proposals were rife with security flaws, even when the proposed algorithms were as simple as five lines of interactions between principals. To address this problem, in 1996, Martin Abadi and Roger Needham decide to write a paper [1] outlining fundamental principles whose adherence would potentially lead to more robust protocols avoiding the most common failures. A natural question to ask here is how relevant are the principles laid out by them in [1] today. It is quite reasonable to believe that these principles aren’t as relevant today as they were a few years ago; we use standard well-vetted protocols today and rarely design our own cryptographic protocols from scratch. In addition, unlike the 90’s when the only available building blocks in designing protocols were encryption and signatures, we have more powerful primitives today which make it much easier to design robust protocols. Some of these primitives include: 1. Point-to-point secure channels. Standard protocols like SSL can be used for this. 2. Sealed data or authenticated encryption for securely storing data. 2. Notation We use A ! B : m to mean that A sends the message m to B, where A; B are principals (a.k.a parties) involved in the interaction. fmgK denotes that m is encrypted with the key −1 K. [m]K−1 denotes that m is signed with the key K .
    [Show full text]
  • Your Magazine from the British Ecological Society
    The BulletinYOUR MAGAZINE FROM THE BRITISH ECOLOGICAL SOCIETY BES BULLETIN VOLin 44:4FOCUS / DECEMBER 2013 Photo: Danielle Green Danielle’s photo of Mark Browne apparently ‘taking a closer look’ at the mud of County Donegal appealed to the judging panel for the BES photocompetition. There are more images from the competition on p37 onwards. 2 Contents December 2014 OFFICERS AND COUNCIL FOR THE YEAR 2012-3 REGULARS President: Bill Sutherland Welcome / Alan Crowden 4 Past-President: Georgina Mace Vice-Presidents: Richard Bardgett, President’s Piece / W. J. Sutherland 5 Mick Crawley Honorary Treasurer: Drew Purves Ecology Education and Careers / Karen Devine and Christina Ravinet 25 Council Secretary: Dave Hodgson Honorary Chairpersons: Science Policy Andrew Beckerman (Meetings) Holyrood Batman! – The BES’s day in the Scottish Parliament / Rob Brooker 24 Alan Gray (Publications) Lesley Batty (Education, Training Society News 34 and Careers) Juliet Vickery (Public and Policy) Special Interest Group News 41 Richard Bardgett (Grants) ORDINARY MEMBERS Letters to the Editor 50 OF COUNCIL: Retiring Of Interest to Members 51 Emma Goldberg, 2014 William Gosling, Ruth Mitchell The Chartered Institute of Ecology and Environmental Management / Sally Hayns 72 Julia Blanchard, 2015 Greg Hurst, Paul Raven Publishing News: BES Publications Data Archiving Policy / Liz Baker 74 Emma Sayer, Owen Lewis, 2016 Matt O’Callaghan Book Reviews 81 Diana Gilbert, Jane Hill, 2017 Diary 92 Joanna Randall Bulletin Editor: Alan Crowden 48 Thornton Close, Girton, FEATURES
    [Show full text]
  • A Logic of Authentication
    A Logic of Authentication MICHAEL BURROWS and MARTIN ABADI Digital Equipment Corporation and ROGER NEEDHAM University of Cambridge Computer Laboratory Authentication protocols are the basis of security in many distributed systems, and it is therefore essential to ensure that these protocols function correctly. Unfortunately, their design has been extremely error prone. Most of the protocols found in the literature contain redundancies or security flaws. A simple logic has allowed us to describe the beliefs of trustworthy parties involved in authentication protocols and the evolution of these beliefs as a consequence of communication. We have been able to explain a variety of authentication protocols formally, to discover subtleties and errors in them, and to suggest improvements. In this paper we present the logic and then give the results of our analysis of four published protocols, chosen either because of their practical importance or because they serve to illustrate our method. Categories and Subject Descriptors: C.2.0 [Computer-Communication Networks]: General- security and protection; C.2.2 [Computer-Communication Networks]: Network Protocols-pro- tocol uerification; D.4.6 [Operating Systems]: Security and Protection-authentication; crypto- graphic controls; uerification; E.3 [Data]: Data Encryption-public key cryptosystems; F.3.1 [Logics and Meanings of Programs]: Specifying and Verifying and Reasoning about Programs General Terms: Security, Theory, Verification Additional Key Words and Phrases: Authentication protocols, cryptographic protocol, key distribution protocols, logics of knowledge and belief, Needham-Schroeder, X.509 1. INTRODUCTION Authentication protocols are the basis of security in many distributed systems, and it is therefore essential to ensure that these protocols function correctly [X5].
    [Show full text]