The Use of Formal Methods for Trusted Digital Signature Devices

This paper presents a formal security policy model for SmartCards with digital signature application. This kind of model is necessary for each evaluation according to Information Technology Security Evaluation Criteria assurance level E4 (Common Criteria level EAL5) and above. Furthermore, we argue that such a model is essential for reasoning about the security of Information Technology components like a specific IT product or IT system. Without an unambiguous definition of what security means, it is impossible to say whether a product really is secure.

• Type: Conference
• Year: 2000
• Where: FLAIRS
• Authors: Bruno Langenstein, Roland Vogt, Markus Ullmann
• Keywords: Artificial Intelligence, Digital Signature Application, FLAIRS 2000, Information Technology Security Evaluation Criteria, Security Policy Model