loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
2003 IEEE International Conference on E-Commerce Technology (CEC'03)
The Security Problems of Rivest and Shamir's PayWord Scheme
Newport Beach, California
June 24-June 27
ISBN: 0-7695-1969-5
Norio Adachi, Waseda University
Yuichi Komano, Toshiba
Kazuo Ohta, The University of Electro-Communications
The PayWord Scheme was proposed by Rivest and Shamir for micropayments. This paper points out that it has the following problem: a malicious customer can damage the bank by purchasing in excess of the customer's credit which the bank has guaranteed by issuing the certificate. In general, there are two positions of the bank with regard to the certificate. Position 1: the bank takes full responsibility for the certificate and compensates all payments created by the customer's purchases; and Position 2: the bank doesn't redeem payments exceeding a limit set for the customer and shares the loss with the shop if trouble occurs.
In the PayWord Scheme, the bank can reduce its risk by adopting Position 2 rather than Position 1. However, this paper points out that the bank can damamge the shop in Position 2 by impersonating an imaginary customer and making the shop share the loss with the bank.
Citation:
Norio Adachi, Yuichi Komano, Satoshi Aoki, Kazuo Ohta, "The Security Problems of Rivest and Shamir's PayWord Scheme," cec, pp.20, 2003 IEEE International Conference on E-Commerce Technology (CEC'03), 2003
Usage of this product signifies your acceptance of the Terms of Use.