Logical Analysis and Verification of Cryptographic Protocols - Loria
Logical Analysis and Verification of Cryptographic Protocols - Loria
Logical Analysis and Verification of Cryptographic Protocols - Loria
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
6.5. A DECIDABILITY RESULT 163<br />
{na, Bob, Kab, {Kab, Alice} s Kbs }s Kas ∪ {n′ a} s na ⊲ n′ a) <strong>and</strong> E1 is the initial knowledge <strong>of</strong><br />
the intruder, E1 = {Alice, Bob, s, Kis, na}.<br />
We associate to this ground constraint system the following set <strong>of</strong> clauses CC:<br />
CE1 → I(Alice)<br />
CE1 → I(Bob)<br />
CE1 → I(na)<br />
CE1 ∪ I({na, Bob, Kab, {Kab, Alice}Kbs }s Kas ) → I({na, Bob} s Kas )<br />
CE1 ∪ I({na, Bob, Kab, {Kab, Alice} s Kbs }s Kas ) ∪ I({n′ a} s na ) → I(n′ a)<br />
where CE1 = {I(Alice), I(Bob), I(s), I(Kis), I(na)}. It is easy to see that CC is entailed<br />
from CI where CI = CDV ∪ Cpre.<br />
6.5 A decidability result<br />
In this section, we show the decidability <strong>of</strong> the ground entailment problem for a<br />
new fragment <strong>of</strong> first order logic. To get this result, we consider a refinement <strong>of</strong><br />
resolution, the selected resolution, that we present in Section 6.5.1, <strong>and</strong> for which<br />
we show the completeness <strong>and</strong> soundness. We prove our decidability result in<br />
Section 6.5.2.<br />
6.5.1 Selected resolution<br />
In Section 6.1.2, we have presented the resolution <strong>and</strong> the st<strong>and</strong>ard ordering<br />
refinement <strong>of</strong> resolution (the ordered resolution). In this section, we present another<br />
refinement <strong>of</strong> resolution, the selected resolution (or resolution with selection)<br />
<strong>and</strong> then show its completeness <strong>and</strong> soundness.The selected resolution is the<br />
resolution considered in the remainder <strong>of</strong> this chapter.<br />
A selection function is a function that will be applied to each clause <strong>and</strong> selects<br />
(or marks) a possibly empty set <strong>of</strong> its atoms. A selection function is said to be<br />
valid if for each clause, either all maximal atoms are selected or, at least one atom<br />
appearing in the antecedent <strong>of</strong> the clause is selected [146].<br />
The selection resolution has been widely studied in the literature [134, 133,<br />
137, 146, 164]. In [134], R. Kowalski <strong>and</strong> D. Kuehner introduced the linear resolution<br />
with selection function, also called SL-resolution. This resolution is<br />
closely related to D. W. Lovel<strong>and</strong>’s model elimination system [143]. In [133],<br />
R. Kowalski introduced another variation <strong>of</strong> linear resolution with selection,<br />
which considers only Horn clauses <strong>and</strong> not general clauses as in [134]. In [146],<br />
Ch. Lynch introduced the resolution with selection as we employ it. He assumed<br />
a selection function which, for each clause, selects all maximal atoms or,<br />
at least one atom appearing in the antecedent <strong>of</strong> the clause. He assumed also<br />
that the resolution includes the following deletion rules: tautology deletion <strong>and</strong>