Design and verification of security API structure based on PKCS #11

Abstract

This paper is devoted to design SecurityAPI that solves the disadvantages and restrictions due to several attack types of public key SecurityAPI and provides the security services. SecurityAPI may be applied to both domestic and foreign standard using domestic standard algorithm such as KCDSA and HAS-160 added to conventional PKCS #11. To verify the security of SecurityAPI for protecting key object based on public key, we provide the flow chart of each SecurityAPI function by graphical method using CPN and describe the process of SecurityAPI by sentence. Also, we analyze the CPN model of proposed Security API structure using the place invariant and verify the security of SecurityAPI that we do not need the modification for input data. © 2006 IEEE.