一个新的公平非否认协议

在安全数据传输协议中，发送方和接收方的非否认性及公平性非常重要。通常可以通过采用数据传输中的双方非否认协议来达到这个目的。在克服CMPI协议缺陷的基础上，提出了一种新的公平非否认电子邮件协议。经过使用改进的Kailor逻辑分析验证，新的协议满足非否认性和公平性原则，可广泛应用于电子邮件、电子合同等电子商务应用中。     

对一种公平非否认协议的新改进

Zhou-Gollmann协议是一种公平非否认协议,近年来得到广泛讨论.Kim发现该协议在时限公平性方面存在缺陷,针对该缺陷提出一种改进的协议,但其改进方法高度依赖于网络时钟的同步.通过详细分析,发现在缺乏时钟同步时Kim的改进协议也可导致不公平.针对此问题,提出一种新的改进方案.新的改进消除了协议对时钟同步的依赖性,保持了协议的公平非否认性,且不会降低协议的效率.     

一种安全电子招标系统中专家抽取的方法*

介绍了基于PKI架构的公开电子招标系统中专家管理信息系统的专家抽取方法。该方法通过使用加密技术解决专家抽取过程中的安全问题。采用盲签名协议保证抽取信息的机密性、真实性和不可否认性;通过随机算法保证抽取结果的随机化。在基于Web的客户端,监督方在监控抽取过程中对抽取信息未知的情况下签名,确认抽取结果,抽取结果在公布时,获得带有监督方签名的抽取结果。     

一个含多个可信第三方的不可否认协议*

提出了一个含多个脱线TTP的公平的不可否认协议。与以前的不可否认协议相比,其特点是把一个TTP的任务分散到t个TTP,减少了对一个TTP的依赖,还可以检测出不诚实的TTP,并且实现了TTP的透明性。     

一种匿名的E-Mail认证协议

文章提出了一种通过匿名方式进行通信的E-Mail认证协议,该协议借助离线可信第三方(Off-line Trusted Third Party)传递电子邮件内容,既能保证邮件内容的私密性,又能保证通信主体的匿名性。协议分为主协议、取消协议和完成协议三部分,具有不可否认性、公平性和认证性等性质。     

一种有效的可证实的电子邮件协议

文章提出了一个具有完善保密的、公正的、ElGamal签名的、可证实的电子邮件协议。该协议保证了只有在发送者收到了接收者的电子收据后,接收者才能阅读信件内容。协议完全执行后,发送者不能否认自己所发的邮件,接收者也不能否认自己已阅读了该邮件。该协议具有完善的安全性,在协议的执行过程中,除了发送者和接收者,任何信任三方都不可能知道邮件的内容。     

一种基于第三方的抗抵赖邮件协议*

在分析现有的用于邮件抗抵赖方法的基础上,提出了一种可以有效防止抵赖的基于第三方的电子邮件协议,并完整阐述了该协议模型的工作流程,随后从不同的方面对其安全性作出了详细的分析。     

Minimizing TTP's involvement in signature validation

A digital signature applied on a message could serve as irrefutable cryptographic evidence to prove its origin and integrity. However, evidence solely based on digital signatures may not enforce strong non-repudiation. Additional mechanisms are needed to make digital signatures as valid non-repudiation evidence in the settlement of possible disputes. Most of existing mechanisms for maintaining the validity of digital signatures rely on the supporting services from trusted third parties, e.g., time-stamping and certificate revocation. Obviously, this is less efficient for on-line transactions. In this paper, we propose two new schemes for validating digital signatures as non-repudiation evidence that minimize the trusted third party's involvement. Major results have been published at ACISP'02 [21] and ISC'03 [22]. Jianying Zhou is a lead scientist at Institute for Infocomm Research (I2R), and heads the Internet Security Lab. He is also an adjunct professor in University of Science and Technology of China and an adjunct senior scientist in University of Malaga. Dr. Zhou worked in China, Singapore, and USA before joining I2R. He was a security consultant at the headquarters of Oracle Corporation, and took an architect role on securing e-business applications. He was a project manager at Kent Ridge Digital Labs, and led an R&D team to develop network security technologies. He was a post-doctoral fellow in National University of Singapore, and involved in a strategic research programme on computer security funded by National Science and Technology Board. He was formerly employed in Chinese Academy of Sciences, and played a critical role in a couple of national information security projects. Dr. Zhou obtained PhD degree in Information Security from University of London (sponsored by UK government and K C Wong Education Foundation), MSc degree in Computer Science from Chinese Academy of Sciences, and BSc degree in Computer Science from University of Science and Technology of China. His research interests are in computer and network security, cryptographic protocol, digital signature and non-repudiation, mobile communications security, public-key infrastructure, secure electronic commerce, and virtual private network. Dr. Zhou is actively involved in the academic community, serving on international conference committees and publishing papers at prestigious technical conferences and journals. He is a world-leading researcher on non-repudiation, and authored the book Non-repudiation in Electronic Commerce which was published by Artech House in 2001. He is a director in the board of International Communications and Information Security Association. He is a co-founder and steering committee member of International Conference on Applied Cryptography and Network Security, and served as program chair of ACNS 2003 and general chair of ACNS 2004. He received National Science and Technology Progress Award from State Commission of Science and Technology in 1995 in recognition of his achievement in the research and development of information security in China.     

不可否认协议的公平性差异

不可否认协议目的是防止参与方对其行为的否认。不可否认协议必须保证参与方之间的公平,但不同协议之间的公平性差异是现实存在的,表现在达到公平的强弱程度上。该文就公平层次问题进行讨论,在扩展了已有的公平定义的基础上,结合相应的实例将不可否认协议分成三个不同的层次;同时,也给出了同步与异步协议的公平性差异的若干结论。     

一种基于公告牌的反拒认协议

反拒认协议是为参与电子交易的双方事后抵赖提供不可否认证据的一个重要安全协议。然而, 交易的高效性、公平性也是人们所追求的目标。该文基于公告牌给出了一个高效的、公平的反拒认协议,有 效地解决了由于可信的第3方负担过重造成的瓶颈。并实现了公平性,高效性,低计算量特点。