2003 IEEE International Conference on E-Commerce Technology (CEC'03) The Security Problems of Rivest and Shamir's PayWord Scheme Newport Beach, California June 24-June 27 ISBN: 0-7695-1969-5
The PayWord Scheme was proposed by Rivest and Shamir for micropayments. This paper points out that it has the following problem: a malicious customer can damage the bank by purchasing in excess of the customer's credit which the bank has guaranteed by issuing the certificate. In general, there are two positions of the bank with regard to the certificate. Position 1: the bank takes full responsibility for the certificate and compensates all payments created by the customer's purchases; and Position 2: the bank doesn't redeem payments exceeding a limit set for the customer and shares the loss with the shop if trouble occurs.In the PayWord Scheme, the bank can reduce its risk by adopting Position 2 rather than Position 1. However, this paper points out that the bank can damamge the shop in Position 2 by impersonating an imaginary customer and making the shop share the loss with the bank.
Citation:
Norio Adachi, Yuichi Komano, Satoshi Aoki, Kazuo Ohta, "The Security Problems of Rivest and Shamir's PayWord Scheme," cec, pp.20, 2003 IEEE International Conference on E-Commerce Technology (CEC'03), 2003 Usage of this product signifies your acceptance of the Terms of Use. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||