author  paulson 
Wed, 17 Sep 1997 16:37:27 +0200  
changeset 3678  414e04d7c2d6 
parent 3519  ab0a9fbed4c0 
child 3683  aafe719dff14 
permissions  rwrr 
3512
9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

1 
(* Title: HOL/Auth/Event 
9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

2 
ID: $Id$ 
9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

3 
Author: Lawrence C Paulson, Cambridge University Computer Laboratory 
9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

4 
Copyright 1996 University of Cambridge 
9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

5 

9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

6 
Theory of events for security protocols 
9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

7 

9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

8 
Datatype of events; function "sees"; freshness 
3678  9 

10 
"lost" agents have been broken by the Spy; their private keys and internal 

11 
stores are visible to him 

3512
9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

12 
*) 
9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

13 

9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

14 
Event = Message + List + 
9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

15 

9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

16 
consts (*Initial states of agents  parameter of the construction*) 
3519
ab0a9fbed4c0
Changing "lost" from a parameter of protocol definitions to a constant.
paulson
parents:
3512
diff
changeset

17 
initState :: agent => msg set 
3512
9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

18 

9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

19 
datatype (*Messagescould add another constructor for agent knowledge*) 
9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

20 
event = Says agent agent msg 
9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

21 
 Notes agent msg 
9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

22 

9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

23 
consts 
3678  24 
lost :: agent set (*compromised agents*) 
3519
ab0a9fbed4c0
Changing "lost" from a parameter of protocol definitions to a constant.
paulson
parents:
3512
diff
changeset

25 
sees :: [agent, event list] => msg set 
ab0a9fbed4c0
Changing "lost" from a parameter of protocol definitions to a constant.
paulson
parents:
3512
diff
changeset

26 

ab0a9fbed4c0
Changing "lost" from a parameter of protocol definitions to a constant.
paulson
parents:
3512
diff
changeset

27 
rules 
ab0a9fbed4c0
Changing "lost" from a parameter of protocol definitions to a constant.
paulson
parents:
3512
diff
changeset

28 
(*Spy has access to his own key for spoof messages, but Server is secure*) 
ab0a9fbed4c0
Changing "lost" from a parameter of protocol definitions to a constant.
paulson
parents:
3512
diff
changeset

29 
Spy_in_lost "Spy: lost" 
ab0a9fbed4c0
Changing "lost" from a parameter of protocol definitions to a constant.
paulson
parents:
3512
diff
changeset

30 
Server_not_lost "Server ~: lost" 
3512
9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

31 

3678  32 
consts 
33 
sees1 :: [agent, event] => msg set 

34 

35 
primrec sees1 event 

36 
(*Spy reads all traffic whether addressed to him or not*) 

37 
sees1_Says "sees1 A (Says A' B X) = (if A:{B,Spy} then {X} else {})" 

38 
sees1_Notes "sees1 A (Notes A' X) = (if A=A'  A=Spy & A':lost then {X} 

39 
else {})" 

40 

3512
9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

41 
primrec sees list 
3519
ab0a9fbed4c0
Changing "lost" from a parameter of protocol definitions to a constant.
paulson
parents:
3512
diff
changeset

42 
sees_Nil "sees A [] = initState A" 
ab0a9fbed4c0
Changing "lost" from a parameter of protocol definitions to a constant.
paulson
parents:
3512
diff
changeset

43 
sees_Cons "sees A (ev#evs) = sees1 A ev Un sees A evs" 
3512
9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

44 

9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

45 
constdefs 
9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

46 
(*Set of items that might be visible to somebody: complement of the set 
9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

47 
of fresh items*) 
9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

48 
used :: event list => msg set 
3519
ab0a9fbed4c0
Changing "lost" from a parameter of protocol definitions to a constant.
paulson
parents:
3512
diff
changeset

49 
"used evs == parts (UN B. sees B evs)" 
3512
9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

50 

9dcb4daa15e8
Moving common declarations and proofs from theories "Shared"
paulson
parents:
diff
changeset

51 
end 