Logical Analysis and Verification of Cryptographic Protocols - Loria
Logical Analysis and Verification of Cryptographic Protocols - Loria
Logical Analysis and Verification of Cryptographic Protocols - Loria
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
6.1. PRELIMINARIES 151<br />
The clause (Γ → ∆, A)α is called a factor <strong>of</strong> the premise or a conclusion <strong>of</strong> the<br />
inference, <strong>and</strong> the atom Aα is called the factored atom.<br />
(Binary) resolution is a refutationally complete theorem proving method: the empty<br />
clause (i.e., a contradiction) can be derived from any unsatisfiable set <strong>of</strong> clauses.<br />
The search <strong>of</strong> a contradiction proceeds by saturating the given set <strong>of</strong> clauses,<br />
that is, systematically applying all inferences rules until no more new clauses<br />
can be added [176].<br />
Ordered Resolution<br />
Ordered resolution is described by the following two inference rules:<br />
Ordered resolution<br />
Γ → ∆, A A ′ , Γ ′ → ∆ ′<br />
(Γ, Γ ′ → ∆, ∆ ′ )α<br />
where α is the most general unifier <strong>of</strong> A <strong>and</strong> A ′ ,<br />
Aα is strictly maximal with respect to Γα, ∆α,<br />
<strong>and</strong> Aα is maximal with respect to Γ ′ α, ∆ ′ α.<br />
Ordered factoring<br />
Γ → ∆, A, A ′<br />
(Γ → ∆, A)α<br />
where α is the most general unifier <strong>of</strong> A <strong>and</strong> A ′ ,<br />
Aα is strictly maximal with respect to Γα,<br />
<strong>and</strong> maximal with respect to ∆α.<br />
Ordered resolution (respectively ordered factoring) inference rule requires that<br />
there is no atom in the conclusion greater than the resolved (respectively factored)<br />
atom. Ordered resolution, i.e. ordered resolution inference rule together<br />
with ordered factoring rule, is refutationally complete <strong>and</strong> sound, <strong>and</strong> hence,<br />
for any set S <strong>of</strong> clauses, S is unsatisfiable if <strong>and</strong> only if empty clause can be<br />
derived from S [24].<br />
We remark that not every ground instance <strong>of</strong> an inference by ordered resolution<br />
is an inference by ordered resolution. For example, let Inf be the following<br />
inference by ordered resolution<br />
I(y) → I ′ (x) I ′ (x ′ ), I(y ′ ) → I ′′ (y ′ )<br />
I(y), I(y ′ ) → I ′′ (y ′ )<br />
The most general unifier <strong>of</strong> I ′ (x), I ′ (x ′ ) is α = {x ′ ↦→ x}. By definition <strong>of</strong><br />
ordered resolution inference, we have that I(yα) �≥ I ′ (xα), I(y ′ α) �> I ′ (xα),<br />
<strong>and</strong> I ′′ (y ′ α) �> I ′ (xα). Let the ground substitution σ be such that σ = αα ′ ,<br />
I(yσ) > I(y ′ σ) > I ′′ (y ′ σ) > I ′ (xσ) <strong>and</strong> I ′ (xσ) = I ′ (x ′ σ). Infσ is a ground<br />
instance <strong>of</strong> Inf, <strong>and</strong> it is easy to see that Infσ is not an inference by ordered<br />
resolution.