| | This Article | |
| |
| |
| | Share | |
| |
| |
| | Bibliographic References | |
| |
| |
| | Add to: | |
| |
 Digg
 Furl
 Spurl
 Blink
 Simpy
 Google
 Del.icio.us
 Y!MyWeb
| |
| | Search | |
| |
| |
| | |
A Family of Trusted Third Party Based Fair-Exchange Protocols
October-December 2005 (vol. 2 no. 4)
pp. 273-286
Fair exchange protocols play an important role in application areas such as e-commerce where protocol participants require mutual guarantees that a transaction involving exchange of items has taken place in a specific manner. A protocol is fair if no protocol participant can gain any advantage over an honest participant by misbehaving. In addition, such a protocol is fault-tolerant if the protocol can ensure that an honest participant does not suffer any loss of fairness despite any failures of the participant's node. This paper presents a family of fair exchange protocols for two participants which make use of the presence of a trusted third party, under a variety of assumptions concerning participant misbehavior, message delays, and node reliability. The development is systematic, beginning with the strongest set of the assumptions and gradually weakening the assumptions to the weakest set. The resulting protocol family exposes the impact of a given set of assumptions on solving the problem of fair exchange. Specifically, it highlights the relationships that exist between fairness and assumptions on the nature of participant misbehavior, communication delays, and node crashes. The paper also shows that the restrictions assumed on a dishonest participant's misbehavior can be realized through the use of smartcards and smartcard-based protocols.
[1] 273 N. Asokan, M. Schunter, and M. Waidner, “Optimistic Protocols for Fair Exchange,” Proc. Fourth ACM Conf. Computer and Comm. Security, pp. 8-17, Apr. 1997.[2] N. Asokan, M. Schunter, and M. Waidner, “Asynchronous Protocols for Optimistic Fair Exchange,” Proc. IEEE Symp. Research in Security and Privacy, pp. 86-99, 1998.[3] G. Avoine, F. Gartner, R. Guerraoui, and M. Vuolic, “Gracefully Degrading Fair-Exchange with Security Modules,” Proc. Fifth European Dependable Computing Conf. (EDCC '05) pp. 55-71, 2005.[4] F. Bao, R. Deng, and W. Mao, “Efficient and Practical Fair-Exchange Protocols with Offline TTP,” Proc. IEEE Symp. Research in Security and Privacy, pp. 77-85, 1998.[5] G. Bella, “Inductive Verification of Smart Card Protocols,” J. Computer Security, vol. 11, no. 1, pp. 87-132, 2003.[6] M. Ben-Or, O. Goldreich, S. Micali, and R.L. Rivest, “A Fair Protocol for Signing Contracts,” IEEE Trans. Information Theory, vol. 36, no. 1, pp. 10-46, Jan. 1990.[7] B. Barak, O. Goldreich, R. Impagliazzo, S. Rudich, A. Sahai, S. Vadhan, and K. Yang, “On the (Im)Possibility of Obfuscating Programs,” Proc. Conf. Advances in Cryptology (CRYPTO '01), pp. 1-18, 2001.[8] R. Chadha, J.C. Mitchell, A. Scedrov, and V. Shmatikov, “Contract Signing, Optimism, and Advantage,” Proc. 14th Int'l Conf. Concurrency Theory (CONCUR), pp. 366-382, 2003.[9] C.S. Collberg and C. Thomborson, “Watermarking, Tamper-Proofing and Obfuscation,” Technical Report #170, Univ. of Auckland, New Zealand, 2000, http://www.cs.arizona.edu/~collberg/Research/ Publications/CollbergThomborson2000a index.html.[10] P.D. Ezhilchelvan and S.K. Shrivastava, “Systematic Development of a Family of Fair Exchange Protocols,” Proc. 17th Ann. IFIP WG 11.3 Working Conf. Database and Applications Security, pp. 243-258, 2004.[11] P.D. Ezhilchelvan and S.K. Shrivastava, “A Family of Trusted Third Party Based Fair-Exchange Protocols,” Technical Report, CS-TR-928, School of Computing Science, Univ. of Newcastle, 2005, http://www.cs.ncl.ac.uk/research/pubs/trs/ papers928.pdf.[12] M.J. Fischer, N.A. Lynch, and M.S. Paterson, “Impossibility of Distributed Consensus with One Faulty Process,” J. ACM, vol. 32, no. 2, pp. 374-382, Apr. 1985.[13] M.K. Franklin and M.K. Reiter, “Fair-Exchange with a Semi-Trusted Third Party,” Proc. Fourth ACM Conf. Computer and Comm. Security, pp. 1-7, Apr. 1997.[14] J.A. Garay, M. Jakobsson, and P. McKenzie, “Abuse-Free Contract Signing,” Proc. Advances in Cryptology Conf. (CRYPTO 99), pp. 449-466, 1999.[15] R. Jerdonek, P. Honeyman, K. Coffman, J. Rees, and K. Wheeler, “Implementation of a Provably Secure Smartcard-Based Key Distribution Protocol,” Proc. Third SmartCard Research and Advanced Application Conf., pp. 229-235, 1998.[16] P. Liu, P. Ning, and S. Jajodia, “Avoiding Loss of Fairness Owing to Process Crashes in Fair Data Exchange Protocols,” Proc. Int'l Conf. Dependable Systems and Network, pp. 631-40, June 2000.[17] B. Pfitzmann, M. Schunter, and M. Waidner, “Optimal Efficiency of Optimistic Contract Signing,” Proc. ACM Symp. Principles of Distributed Computing (PODC 98), pp. 113-122, 1998.[18] I. Ray and I. Ray, “An Optimistic Fair Exchange E-Commerce Protocol with Automated Dispute Resolution,” Proc. Int'l Conf. Electronic Commerce and Web Technologies, pp. 84-93, 2000.[19] I. Ray, I. Ray, and N. Narasimhamurthy, “A Fair-Exchange E-Commerce Protocol with Automated Dispute Resolution,” Proc. Conf. Database Security (DBSec), pp. 27-38, 2000.[20] V. Shoup and A. Rubin, “Session Key Distribution Using Smart Cards,” Proc. Conf. Advances in Cryptology (EUROCRYPT 96), pp. 321-331, 1996.[21] J.D. Tygar, “Atomicity in Electronic Commerce,” Internet Besieged, pp. 389-405, 1997.[22] Trusted Computing Group, http:/www.trustedcomputinggroup. org/, 2005.[23] H. Vogt, H. Pagnia, and F.C. Gartner, “Modular Fair Exchange Protocols for Electronic Commerce,” Proc. 15th Ann. Computer Security Applications Conf., pp. 3-11, Dec. 1999.[24] H. Vogt, H. Pagnia, and F.C. Gartner, “Using Smart Cards for Fair-Exchange,” Proc. Second Int'l Workshop Electronic Commerce (WELCOM 2001), pp. 101-113, 2001.[25] J. Zhou and D. Gollmann, “A Fair Nonrepudiation Protocol,” Proc. IEEE Symp. Research in Security and Privacy, pp. 55-61, 1996.
Index Terms:
Index Terms- Fair exchange, security, Trusted Third Party (TTP), smartcards, crash tolerance, distributed systems.
Citation:
Paul D. Ezhilchelvan, Santosh K. Shrivastava, "A Family of Trusted Third Party Based Fair-Exchange Protocols," IEEE Transactions on Dependable and Secure Computing, vol. 2, no. 4, pp. 273-286, Oct.-Dec. 2005, doi:10.1109/TDSC.2005.40
