## 3 Simple Resource Algorithm
### Advertising Cloud Formulation
In step 9, the service request is the service to the service. In step 10, the service request is the service to the service. In step 11, the service request is the service to the service. In step 12, the service request is the



in 60 s if the Application does not connect to the server. This SERV TIME CAP is a private proxy capability derived from the Service Capability and cannot be altered; only the USER CAP and DEV CAP can utilize the capability. The Chosen Server also provides its IP address and the TCP port of the Service using the public key of the SMF. In the final step of Stage 2, the SMF returns to the Application with DEV CAP, USER CAP, timed capability, the Server's IP address, Service Port number, and public keys of the Chosen Server, enabling the Application to connect to the server. 3. APPL \(\rightarrow\) SMF: (Request service (Service Name, Service Version, DEV CAP, USER CAP, PK(APPL)), (PK(SMF)) 4. SMF Chosen \(\rightarrow\) Server: (Usage request (DEV CAP, USER CAP, IP Client), (PK(SERV))). 5. Chosen Server \(\rightarrow\) SMF: SMF (Usage request accepted (DEV CAP, USER CAP, SERV TIME CAP, IP Server, Port Server), (PK(SMF))) 6. SMF \(\rightarrow\) APPL: (Request service accepted (DEV CAP, USER CAP, SERV TIME CAP, IP Server, Port Server, PK(SERV)), (PK(APPL))) * **Stage 3: The Application sets up a secure session with the Server:** During Stage 3, the Application initiates a secure session with the Server by sending a session start request. This request includes the DEV CAP (device capability), USER CAP (user capability), SERV ID (server ID), a unique random number called Nonce of A (NA), the Server's public key, and the SERV TIME CAP (server time capability). Nonce (NA) ensures that the session is unique on the Application side. In response, the Server sends back a session capability (CAP SESS), DEV CAP, USER CAP, NA, NB (another unique random number for the Server side), and a session key (SESS KEY). The SESS KEY is a symmetric key used in a single communication session. 7. APPL \(\rightarrow\) Chosen Server: (Session Start Request (DEV CAP, USER CAP, SERV ID, SERV TIME CAP, NA)), (PK(SERV)). 8. Chosen Server \(\rightarrow\) APPL: (Session Start Request Accepted DEV CAP, USER CAP, CAP SESS, SES KEY, NA, NB), (PK(APPL)). * **Stage 4: The Application gets service by using the CAP SESS key and encrypts using the SESS KEY:** In Stage 4 of the process, the application uses the CAP SESS key to access a service and encrypts data using the SESS KEY. The application sends a service request to the chosen server with the CAP SESS, Nonce (NB), and uses the SESS KEY. The server responds by sending CAP SESS, NA, and detailed results using the SESS KEY. NA ensures that the session is unique on the application side. 9. APPL \(\rightarrow\) Chosen Server: (Service Request (CAP SESS, NB, Request Details) (SESS KEY)) 10. Chosen Server \(\rightarrow\) APPL: (Service Request Done (CAP SESS, NA, Result Details) (SESS KEY)) * **Stage 5: The Application is finished and terminates the session:** In Stage 5, the application terminates the session by sending an end request to the Chosen Server with CAP SESS, nonce (NB), and the session end indication using the session key. The server then terminates the session and revokes the CAP SESS capability to prevent replay attacks. 11. APPL \(\rightarrow\) Chosen Server: (Session End Request Accepted (CAP SESS, Nonce (A), Session End)(SESS KEY)). ### ProVerif Results

The SSP protocol was designed using the ProVerif tool, and the results show that the system is \"safe\". In Stage 4, the application gets service by using the capability session key and encrypts using the Session key to the Chosen server. The query attacker of function to \"Session key\" (Ksappl) is TRUE. The private keys of Cloud Management System (CMS), Service Management Framework (SMF), Application (Appl), and Chosen Server(S) results as True. In Stage 3 and Stage 4, nonces are used between the chosen Server and the Application to prevent replay attacks. The output of nonce is \"True\" from Server sessions.