30.01.2013 Views

Logical Analysis and Verification of Cryptographic Protocols - Loria

Logical Analysis and Verification of Cryptographic Protocols - Loria

Logical Analysis and Verification of Cryptographic Protocols - Loria

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

164 CHAPTER 6. ON THE GROUND ENTAILMENT PROBLEMS<br />

subsumption; tautology deletion deletes any clause <strong>of</strong> the form Γ, A → ∆, A, <strong>and</strong><br />

subsumption deletes any clause C ′ such that there exists another clause C with<br />

Cσ ⊆ C ′ for a substitution σ. In [164], H. De Nivelle defined another variation<br />

<strong>of</strong> the resolution with selection, called L-ordered resolution. He assumed a selection<br />

function that, for each clause, selects the maximal atoms with respect to an<br />

atom ordering ≺ that verifies the following property: for every atoms A, B, if<br />

A � B then Aθ � Bθ for every substitution θ.<br />

In this chapter, we make use <strong>of</strong> the resolution with selection introduced in<br />

[146], <strong>and</strong> from now on, we consider only a subset <strong>of</strong> the valid selection functions,<br />

namely the functions that select maximal atoms in clauses with respect<br />

to an atom ordering. We remark that the selection functions we consider are<br />

less general than in [146], <strong>and</strong> more general than in [164] since we consider an<br />

arbitrary atom ordering.<br />

Selected resolution is described by the following two inference rules:<br />

Selected resolution<br />

Γ → ∆, A A ′ , Γ ′ → ∆ ′<br />

(Γ, Γ ′ → ∆, ∆ ′ )α<br />

where α is the most general unifier <strong>of</strong> A <strong>and</strong> A ′ ,<br />

<strong>and</strong> A, A ′ are selected in their respective premises.<br />

Selected factoring<br />

Γ → ∆, A, A ′<br />

(Γ → ∆, A)α<br />

where α is the most general unifier <strong>of</strong> A <strong>and</strong> A ′ ,<br />

<strong>and</strong> A or A ′ is selected in the premise.<br />

Selected resolution (respectively selected factoring) inference rule requires that<br />

all atoms in the resolvent <strong>of</strong> two ground premises (respectively in the factor <strong>of</strong><br />

a ground premise) are strictly smaller than the resolved (respectively factored)<br />

atom. We define a notion <strong>of</strong> redundancy that identifies clauses <strong>and</strong> inferences<br />

that are not needed for establishing refutational completeness <strong>of</strong> selected resolution.<br />

To this end, we define next the relations →RS <strong>and</strong> →R g over atoms, <strong>and</strong><br />

S<br />

the notation A ↓S where A is a set <strong>of</strong> atoms <strong>and</strong> S a set <strong>of</strong> clauses.<br />

Definition 55 Let S be a set <strong>of</strong> clauses. We define the relation →RS as follows: we have<br />

A →RS B if there exists a clause C in S <strong>and</strong> A, B two atoms in C such that A≻aB;<br />

<strong>and</strong> we define the relation → g<br />

RS as follows: we have A →R g B if there exists two atoms<br />

S<br />

As , Bs such that As →RS Bs , Asσ = A <strong>and</strong> Bsσ = B for a substitution σ grounding<br />

As , Bs .<br />

Let the rewriting system RS (respectively R g<br />

) be the set <strong>of</strong> rewriting rules<br />

→RS (respectively → R g<br />

S<br />

S<br />

). By definition, it is easy to see that rules in Rg<br />

S are<br />

ground, <strong>and</strong> that R g<br />

S is set <strong>of</strong> ground instances <strong>of</strong> rewriting rules in RS. We also

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!