{ 
s:SES
Legal([NSL-initiator1{i:l}(s);
NSL-initiator2{i:l}(s);
NSL-initiator3;
NSL-responder0{i:l}(s);
NSL-responder1{i:l}(s); NSL-responder2{i:l}(s); NSL-responder3]) }
{ Proof }
Definitions occuring in Statement :
NSL-responder1: NSL-responder1{i:l}(s),
NSL-responder0: NSL-responder0{i:l}(s),
NSL-responder2: NSL-responder2{i:l}(s),
NSL-responder3: NSL-responder3,
NSL-initiator3: NSL-initiator3,
NSL-initiator2: NSL-initiator2{i:l}(s),
NSL-initiator1: NSL-initiator1{i:l}(s),
ses-protocol1-legal: Legal(bss),
security-event-structure: SES,
all: x:A. B[x],
cons: [car / cdr],
nil: []
Definitions :
atom: Atom$n,
l_member: (x 
l),
encryption-key-atoms: encryption-key-atoms(k),
prop: 
,
equal: s = t,
or: P 
Q,
false: False,
union: left + right,
function: x:A 
B[x],
implies: P 
Q,
security-event-structure: SES,
Id: Id,
member: t T,
all: x:A. B[x],
cons: [car / cdr],
rev_implies: P 
Q,
product: x:A 
B[x],
and: P 
Q,
iff: P Q,
guard: {T},
sqequal: s ~ t,
ses-private: Private(A),
nil: [],
ses-private-key: PrivateKey(A),
ses-public-key: PublicKey(A),
l_all: (xL.P[x]),
so_lambda: 
x.t[x],
l_contains: A 
B,
lambda: x.A[x],
concat: concat(ll),
sdata_atoms_id: sdata_atoms_id{sdata_atoms_id_compseq_tag_def:o}(x),
sdata_atoms_atom: sdata_atoms_atom{sdata_atoms_atom_compseq_tag_def:o}(a),
sdata_atoms_pair: sdata_atoms_pair{sdata_atoms_pair_compseq_tag_def:o}(d2; d1),
eq_atom: x =a y,
eq_atom: eq_atom$n(x;y),
pa-useable: pa-useable(pa),
mk-pa: n(v),
pa-used: pa-used(pa),
lt_int: i <z j,
map: map(f;as),
from-upto: [n, m),
natural_number: $n,
select: l[i],
pair: <a, b>,
atom-sdata: data(a),
token: "$token",
sdata-pair: <d1, d2>,
id-sdata: data(x),
int_seg: {i..j
},
int: 
,
le: A 
B,
less_than: a < b,
not: 
A,
lelt: i j < k,
sq_type: SQType(T),
set: {x:A| B[x]} ,
decidable: Dec(P),
list: type List,
nat_plus: 
,
nat: ,
inject: Inj(A;B;f),
reducible: reducible(a),
prime: prime(a),
squash: 
T,
l_disjoint: l_disjoint(T;l1;l2),
exists: 
x:A. B[x],
l_exists: (xL. P[x]),
apply: f a,
infix_ap: x f y,
fun-connected: y is f*(x),
limited-type: LimitedType,
rationals: 
,
qle: r s,
qless: r < s,
q-rel: q-rel(r;x),
p-outcome: Outcome,
dstype: dstype(TypeNames; d; a),
fset-member: a s,
f-subset: xs ys,
fset: FSet{T},
fset-closed: (s closed under fs),
IdLnk: IdLnk,
Knd: Knd,
MaName: MaName,
es-E: E,
es-locl: (e <loc e'),
es-le: e loc e' ,
es-causl: (e < e'),
es-causle: e c e',
existse-before: e<e'.P[e],
existse-le: ee'.P[e],
alle-lt: e<e'.P[e],
alle-le: ee'.P[e],
alle-between1: e[e1,e2).P[e],
existse-between1: e[e1,e2).P[e],
alle-between2: e[e1,e2].P[e],
existse-between2: e[e1,e2].P[e],
existse-between3: e(e1,e2].P[e],
es-E-interface: E(X),
collect-event: collect-event(es;X;n;v.num[v];L.P[L];e),
es-fset-loc: i locs(s),
cut-order: a (X;f) b,
path-goes-thru: x-f*-y thru i,
ses-action: Action(e),
ses-legal-sequence: Legal(pas) given prvt,
subtype_rel: A r B,
strong-subtype: strong-subtype(A;B),
spread: spread def,
tl: tl(l),
hd: hd(l),
assert: 
b,
ses-is-protocol-action: pa(e),
ses-is-protocol-actions: pas(thr),
ses-basic-sequence1: Basic1,
ses-thread: Thread,
void: Void,
ses-disjoint: ActionsDisjoint,
protocol-action: ProtocolAction,
NSL-responder3: NSL-responder3,
ses-legal-thread: Legal(thr)@A,
real: 
,
subtype: S T,
universe: Type,
NSL-responder2: NSL-responder2{i:l}(s),
NSL-responder1: NSL-responder1{i:l}(s),
NSL-responder0: NSL-responder0{i:l}(s),
NSL-initiator3: NSL-initiator3,
NSL-initiator2: NSL-initiator2{i:l}(s),
NSL-initiator1: NSL-initiator1{i:l}(s),
is-basic-seq: thr[A;B] |= bs,
basic-seq-1-5: A B: pas[A;B;m;n;x;y;z],
basic-seq-1-4: A B: pas[A;B;m;n;x;y],
basic-seq-1-1: A B: pas[A; B; m],
basic-seq-1-3: A B: pas[A; B; m; n; x],
basic-seq-1-2: A B: pas[A; B; m; n],
ses-protocol1-thread: (thr is one of bss at A),
ses-protocol1-legal: Legal(bss),
tactic: Error :tactic
Lemmas :
security-event-structure_wf,
ses-protocol1-legal_wf,
ses-legal-thread_wf,
ses-protocol1-thread_wf,
NSL-initiator1_wf,
NSL-initiator2_wf,
NSL-initiator3_wf,
NSL-responder0_wf,
NSL-responder1_wf,
NSL-responder2_wf,
NSL-responder3_wf,
ses-thread_wf,
Id_wf,
ses-basic-sequence1_wf,
is-basic-seq_wf,
ses-disjoint_wf,
ses-private_wf,
encryption-key-atoms_wf,
ses-is-protocol-actions-legal,
ses-private-key_wf,
sdata-pair_wf,
id-sdata_wf,
ses-public-key_wf,
atom-sdata_wf,
mk-pa_wf,
protocol-action_wf,
ses-legal-sequence_wf,
int_seg_wf,
int_seg_properties,
decidable__equal_int,
int_sq,
ses-public-key-atoms,
l_contains_wf,
l_all_wf,
ses-private-key-atoms,
iff_transitivity,
cons_member,
implies_functionality_wrt_iff,
or_functionality_wrt_iff,
nil_member,
iff_wf,
rev_implies_wf,
l_member_wf,
false_wf
\mforall{}s:SES
Legal([NSL-initiator1\{i:l\}(s);
NSL-initiator2\{i:l\}(s);
NSL-initiator3;
NSL-responder0\{i:l\}(s); NSL-responder1\{i:l\}(s); NSL-responder2\{i:l\}(s); NSL-responder3])
Date html generated:
2011_08_17-PM-07_54_34
Last ObjectModification:
2010_09_24-PM-02_34_32
Home
Index