Check out the new USENIX Web site. next up previous
Next: Private output private input. Up: Equivalence Previous: Trusted input + one

Symmetry of input and output.

In a hostile environment, a symmetry exists between the customer and the smart card. (The principal differences are that the smart card has more memory and more computational ability.) Input from the customer's point of view is equivalent to output from the smart card's point of view, and vice versa. Suppose a rule exists of the form

eqnarray102

Then by this symmetry, we also have:

eqnarray106

Applying this rule to the above equivalences, we obtain the following:



TOM Comversion
Fri Oct 4 17:57:09 EDT 1996