Logical Analysis and Verification of Cryptographic Protocols - Loria
Logical Analysis and Verification of Cryptographic Protocols - Loria
Logical Analysis and Verification of Cryptographic Protocols - Loria
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
152 CHAPTER 6. ON THE GROUND ENTAILMENT PROBLEMS<br />
Remarks. All these resolution inference rules have two premises. We implicitly<br />
suppose here that these premises do not share variables, which can be obtained<br />
by renaming the variables <strong>of</strong> one <strong>of</strong> the premises. Note that, by the definition<br />
<strong>of</strong> clauses, the same literal can not appear twice in a clause, for example<br />
the clause A1, A1, A2 → B1, B2 is not permitted. Indeed, we suppose that the<br />
resolution inference rules contain an implicit factorisation which immediately<br />
replaces A, A, Γ → ∆ (respectively Γ → B, B, ∆) by A, Γ → ∆ (respectively<br />
Γ → B, ∆).<br />
6.1.3 Orderings<br />
We shall make use <strong>of</strong> various ordering relations on expressions. A (strict) ordering<br />
≻ on a set <strong>of</strong> elements E is a transitive <strong>and</strong> irreflexive binary relation on E.<br />
The ordering ≻ is said to be:<br />
• well-founded if there is no infinite descending chain e ≻ e1 ≻ . . . for any<br />
element e in E<br />
• monotone if e ≻ e ′ then eσ ≻ e ′ σ for any elements e, e ′ in E <strong>and</strong> any substitution<br />
σ<br />
• stable if e ≻ e ′ then u[e] ≻ u[e ′ ] for any elements u, e <strong>and</strong> e ′ in E<br />
• subterm if e[e ′ ] ≻ e ′ for any elements e, e ′ in E<br />
• complete if it is total over ground elements <strong>of</strong> E<br />
Any ordering ≻ on a set E can be extended to an ordering ≻ set on finite sets<br />
over E as follows: if η1 <strong>and</strong> η2 are two finite sets over E, we have η1 ≻ set η2 if<br />
(i) η1 �= η2 <strong>and</strong> (ii) whenever for every e ∈ η2 \ η1 then there is e ′ ∈ η1 \ η2 such<br />
that e ′ ≻ e. Given a set, any smaller set is obtained by replacing an element<br />
by a (possibly empty) set <strong>of</strong> strictly smaller elements. We will call an element e<br />
maximal (respectively strictly maximal) with respect to a set η <strong>of</strong> elements, if for<br />
any element e ′ in η we have e ′ �≻ e (respectively e ′ �� e). Similarly, any ordering<br />
≻ on a set E can be extended to an ordering ≻ mul on finite multisets over E<br />
as follows: if ξ1 <strong>and</strong> ξ2 are two finite multisets over E, we have ξ1 ≻ mul ξ2<br />
if (i) ξ1 �= ξ2 <strong>and</strong> (ii) whenever ξ2(e) > ξ1(e) then ξ1(e ′ ) > ξ2(e ′ ), for some e ′<br />
such that e ′ ≻ e; ξ(e) denotes the number <strong>of</strong> occurrences <strong>of</strong> e in the multiset<br />
ξ, <strong>and</strong> > denotes the st<strong>and</strong>ard “greater-than” relation on the natural numbers.<br />
Given a multiset, any smaller multiset is obtained by replacing an element by<br />
occurrences <strong>of</strong> smaller elements. We will call an element e maximal (respectively<br />
strictly maximal) with respect to a multiset ξ <strong>of</strong> elements, if for any element e ′ in<br />
ξ we have e ′ �≻ e (respectively e ′ �� e).