Journal of Information Security Reserach ›› 2024, Vol. 10 ›› Issue (4): 311-.

Previous Articles     Next Articles

A Formal Modeling and Verification Method for Bitcoin Payment Protocol

Wang Jionghan, Huang Wenchao, Wang Wansen, and Xiong Yan#br#

#br#
  

  1. (College of Computer Science and Technology, University of Science and Technology of China, Hefei 230026)

  • Online:2024-04-20 Published:2024-04-21

 一种比特币支付协议的形式化建模验证方法

王炯涵黄文超汪万森熊焰


  

  1. (中国科学技术大学计算机科学与技术学院合肥230026)

  • 通讯作者: 黄文超 博士,副教授,博士生导师.主要研究方向为信息安全、人工智能、移动计算、网络与系统安全自动化验证技术、Android系统安全. huangwc@ustc.edu.cn
  • 作者简介:王炯涵 硕士研究生.主要研究方向为区块链、网络协议形式化验证. wangjh1@mail.ustc.edu.cn 黄文超 博士,副教授,博士生导师.主要研究方向为信息安全、人工智能、移动计算、网络与系统安全自动化验证技术、Android系统安全. huangwc@ustc.edu.cn 汪万森 博士研究生.主要研究方向为网络协议形式化验证、区块链. wangws@mail.ustc.edu.cn 熊焰 博士,教授,博士生导师.主要研究方向为计算机网络与信息安全、移动计算与移动网络、分布式处理. yxiong@ustc.edu.cn

Abstract: As a mainstream digital Cryptocurrency, the security of Bitcoin had received widespread attention, with significant research conducted around it. However, there is currently a lack of analysis on the Bitcoin payment process, along with a deficiency in  relevant security standards and detailed modeling analysis, making it challenging to ensure the security of relevant protocols. Addressing this issue, this study began with the concept of consensus and established a symbolic model of the Bitcoin payment protocol based on the Bitcoin community specification and Bitcoin’s digital currency attributes. Corresponding adversary models and security attributes were proposed. Finally the relevant models underwent formal validation using the automatic verification tool Tamarin, completing the verification process of the Bitcoin payment protocol. Consequently, a security vulnerability in the Bitcoin payment protocol was discovered. The potential impact of this vulnerability were discussed.

Key words: bitcoin, formal verification, network protocol security, payment process, symbolic model

摘要: 作为主流的数字加密货币,比特币的安全性受到广泛关注,并且围绕其展开大量的研究工作.然而目前针对比特币支付过程的分析还比较欠缺,缺乏相关的安全标准和精细的建模分析,难以确保相关协议的安全.针对这一问题,基于比特币社区规范与比特币的数字货币功能属性,为比特币支付协议建立了形式化的符号模型与对应的安全属性,并使用自动验证工具Tamarin对相关模型及属性进行了形式化验证,完成了对比特币支付协议的验证工作,并且发现一种未被讨论过的比特币支付协议中的安全威胁,对该问题可能产生的影响进行了分析.

关键词: 比特币, 形式化验证, 网络协议安全, 支付过程, 符号模型

CLC Number: