Modelling audit security for smart-card payment schemes with uml-sec

Abstract

To overcome the difficulties of correct secure systems design, we propose formal modelling using the object-oriented modelling language UML. Specifically, we consider the problem of accountability through auditing. We explain our method at the example of a part of the Common Electronic Purse Specifications (CEPS), a candidate for an international electronic purse standard, indicate possible vulnerabilities and present concrete security advice on that system. © 2002 Kluwer Academic / Plenum Publishers, New York.