Logical Analysis and Verification of Cryptographic Protocols - Loria
Logical Analysis and Verification of Cryptographic Protocols - Loria
Logical Analysis and Verification of Cryptographic Protocols - Loria
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
164 CHAPTER 6. ON THE GROUND ENTAILMENT PROBLEMS<br />
subsumption; tautology deletion deletes any clause <strong>of</strong> the form Γ, A → ∆, A, <strong>and</strong><br />
subsumption deletes any clause C ′ such that there exists another clause C with<br />
Cσ ⊆ C ′ for a substitution σ. In [164], H. De Nivelle defined another variation<br />
<strong>of</strong> the resolution with selection, called L-ordered resolution. He assumed a selection<br />
function that, for each clause, selects the maximal atoms with respect to an<br />
atom ordering ≺ that verifies the following property: for every atoms A, B, if<br />
A � B then Aθ � Bθ for every substitution θ.<br />
In this chapter, we make use <strong>of</strong> the resolution with selection introduced in<br />
[146], <strong>and</strong> from now on, we consider only a subset <strong>of</strong> the valid selection functions,<br />
namely the functions that select maximal atoms in clauses with respect<br />
to an atom ordering. We remark that the selection functions we consider are<br />
less general than in [146], <strong>and</strong> more general than in [164] since we consider an<br />
arbitrary atom ordering.<br />
Selected resolution is described by the following two inference rules:<br />
Selected resolution<br />
Γ → ∆, A A ′ , Γ ′ → ∆ ′<br />
(Γ, Γ ′ → ∆, ∆ ′ )α<br />
where α is the most general unifier <strong>of</strong> A <strong>and</strong> A ′ ,<br />
<strong>and</strong> A, A ′ are selected in their respective premises.<br />
Selected factoring<br />
Γ → ∆, A, A ′<br />
(Γ → ∆, A)α<br />
where α is the most general unifier <strong>of</strong> A <strong>and</strong> A ′ ,<br />
<strong>and</strong> A or A ′ is selected in the premise.<br />
Selected resolution (respectively selected factoring) inference rule requires that<br />
all atoms in the resolvent <strong>of</strong> two ground premises (respectively in the factor <strong>of</strong><br />
a ground premise) are strictly smaller than the resolved (respectively factored)<br />
atom. We define a notion <strong>of</strong> redundancy that identifies clauses <strong>and</strong> inferences<br />
that are not needed for establishing refutational completeness <strong>of</strong> selected resolution.<br />
To this end, we define next the relations →RS <strong>and</strong> →R g over atoms, <strong>and</strong><br />
S<br />
the notation A ↓S where A is a set <strong>of</strong> atoms <strong>and</strong> S a set <strong>of</strong> clauses.<br />
Definition 55 Let S be a set <strong>of</strong> clauses. We define the relation →RS as follows: we have<br />
A →RS B if there exists a clause C in S <strong>and</strong> A, B two atoms in C such that A≻aB;<br />
<strong>and</strong> we define the relation → g<br />
RS as follows: we have A →R g B if there exists two atoms<br />
S<br />
As , Bs such that As →RS Bs , Asσ = A <strong>and</strong> Bsσ = B for a substitution σ grounding<br />
As , Bs .<br />
Let the rewriting system RS (respectively R g<br />
) be the set <strong>of</strong> rewriting rules<br />
→RS (respectively → R g<br />
S<br />
S<br />
). By definition, it is easy to see that rules in Rg<br />
S are<br />
ground, <strong>and</strong> that R g<br />
S is set <strong>of</strong> ground instances <strong>of</strong> rewriting rules in RS. We also