Paper 2006/058

Symbolic and Cryptographic Analysis of the Secure WS-ReliableMessaging Scenario

Michael Backes, Sebastian Mödersheim, Birgit Pfitzmann, and Luca Viganò

Abstract

Web services are an important series of industry standards for adding semantics to web-based and XML-based communication, in particular among enterprises. Like the entire series, the security standards and proposals are highly modular. Combinations of several standards are put together for testing as interoperability scenarios, and these scenarios are likely to evolve into industry best practices. In the terminology of security research, the interoperability scenarios correspond to security protocols. Hence, it is desirable to analyze them for security. In this paper, we analyze the security of the new Secure WS-ReliableMessaging Scenario, the first scenario to combine security elements with elements of another quality-of-service standard. We do this both symbolically and cryptographically. The results of both analyses are positive. The discussion of actual cryptographic primitives of web services security is a novelty of independent interest in this paper.

Metadata
Available format(s)
PDF
Category
Cryptographic protocols
Publication info
Published elsewhere. Extended report of a conference paper appearing at Proceedings of FOSSACS 2006.
Keywords
Web ServicesWS-ReliableMessagingsymbolic analysiscryptographic analysis
Contact author(s)
backes @ cs uni-sb de
History
2006-02-15: received
Short URL
https://ia.cr/2006/058
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2006/058,
      author = {Michael Backes and Sebastian Mödersheim and Birgit Pfitzmann and Luca Viganò},
      title = {Symbolic and Cryptographic Analysis of the Secure WS-ReliableMessaging Scenario},
      howpublished = {Cryptology ePrint Archive, Paper 2006/058},
      year = {2006},
      note = {\url{https://eprint.iacr.org/2006/058}},
      url = {https://eprint.iacr.org/2006/058}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.