Fair Exchange and Anonymous E-Commerce by Deploying Clone-Resistant Tokens

Mars, Ayoub; Adi, Wael

doi:10.23919/mipro.2019.8756734

Cited by 6 publications

(5 citation statements)

References 15 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Finally, the four papers that propose designs of anonymous e-commerce architecture can be categorized into two groups: [32] and [33] utilize blockchain technology for their peer-to-peer marketplace designs that allow for delivery of electronic and physical goods, whereas [34] and [35] are designs for online retailing which are based on other technologies and only allow for delivery of electronic goods. Regarding the two blockchain-based P2P marketplace designs it should be noted that [32] is more of an idea sketch which also does not seem to be practical, as it fails to consider, for example, how physical goods can be delivered while maintaining anonymity, and also requires the use of a marketplace-specific currency called "trade coins".…”

Section: Recent Related Workmentioning

confidence: 99%

“…In contrast to this [33] provides extensive detail, including how payments can be made in USD and how the anonymous delivery of physical goods can be realized by utilization of Internetof-Things (IoT)-enabled logistic centers and delivery boxes. When examining the two online retailing designs more closely, we note that the design of a "Fair Exchange and Anonymous E-Commerce" by Mars and Adi [34] seems to be realizable in general but to require a high integration/deployment effort, since for example customers and retailers need to purchase and use clone-resistant Commercial Hardware Tokens (CHT) and must also involve a trusted One-Time Coin Generator (OTC) and Electronic Commerce Server (ECS) into the purchase and payment processes. In contrast to this the design of a "Privacy Preserving E-Commerce Protocol (PPEP)" by Ike and Sarac [35] seems to be more practicable as it only requires the installation of software at customers and retailers and the involvement of one additional party, called PPEP broker.…”

Section: Recent Related Workmentioning

confidence: 99%

“…the encrypted key 33 -encapsuled in a so-called ClientRequestDTO -to the web service. 34 To do so it uses a custom web service client that supports all methods being implemented by the Backend Application's web services: I.e. the web service client performs the web service request (providing the ClientRequestDTO), interprets the returned status code(s) and converts the received encrypted shop list (see next step) to an encrypted java object.…”

Section: Loading Web Pages With De-facto Static Contentmentioning

confidence: 99%

“…It then manipulates the web page's Document Object Model (DOM) to populate the shop 33 Encrypted with Backend Application Web Service Key (7-B). 34 See step 5 of the Initial Cryptographic Setup described in Section 5.5. 35 The web service itself returns a textual representation of the encrypted object using JavaScript Object Notation (JSON) 36 The shop list is pre-generated during startup of the ProductCatalogService via iterating through all so-called ECommercePlatformConnectors.…”

Section: Dynamically Adding Encrypted Contentmentioning

confidence: 99%

See 3 more Smart Citations

GhostBuy : An All-Steps Anonymous Purchase Platform (ASAPP) based on Separation of Data

Willems,

Adams

2023

2023 20th Annual International Conference on Privacy, Security and Trust (PST)

View full text Add to dashboard Cite

The research presented in this thesis is entirely our own work. Sources are declared throughout the thesis and -regarding adapted / adopted code snippets -in the source code of the prototype implementation that we provide with the thesis.However, in Appendix V we provide an overview of sources that were particularly useful for the prototype implementation. We hope that others will find them as useful as we did.

show abstract

Section: Recent Related Workmentioning

confidence: 99%

Section: Recent Related Workmentioning

confidence: 99%

Section: Loading Web Pages With De-facto Static Contentmentioning

confidence: 99%

Section: Dynamically Adding Encrypted Contentmentioning

confidence: 99%

See 2 more Smart Citations

GhostBuy : An All-Steps Anonymous Purchase Platform (ASAPP) based on Separation of Data

Willems,

Adams

2023

2023 20th Annual International Conference on Privacy, Security and Trust (PST)

View full text Add to dashboard Cite

show abstract

“…The proposed OTA software update is based on building a chain of trust by deploying SUCs invertibility. A new concept for SUC-based secured e-coins circulations was proposed in [27], and an anonymous fair exchange ecommerce deploying SUC-enabled hardware tokens was proposed in [28].…”

Section: B Secret Unknown Ciphersmentioning

confidence: 99%

SRAM-SUC: Ultra-Low Latency Robust Digital PUF

Mars,

Ghandour,

Adi

2021

Preprint

Self Cite

View full text Add to dashboard Cite

Secret Unknown Ciphers (SUC) have been proposed recently as digital clone-resistant functions overcoming some of Physical(ly) Unclonable Functions (PUF) downsides, mainly their inconsistency because of PUFs analog nature. In this paper, we propose a new practical mechanism for creating internally random ciphers in modern volatile and non-volatile SoC FPGAs, coined as SRAM-SUC. Each created random cipher inside a SoC FPGA constitutes a robust digital PUF. This work also presents a class of involutive SUCs, optimized for the targeted SoC FPGA architecture, as sample realization of the concept; it deploys a generated class of involutive 8-bit S-Boxes, that are selected randomly from a defined large set through an internal process inside the SoC FPGA. Hardware and software implementations show that the resulting SRAM-SUC has ultralow latency compared to well-known PUF-based authentication mechanisms. SRAM-SUC requires only 2.88/0.72µs to generate a response for a challenge at 50/200 MHz respectively. This makes SRAM-SUC a promising and appealing solution for Ultra-Reliable Low Latency Communication (URLLC).

show abstract

Privacy in Payment in the Age of Central Bank Digital Currency

Tronnier¹

2021

IFIP Advances in Information and Communication Technology

View full text Add to dashboard Cite

In academia and at central banks, central bank digital currency (CBDC) is increasingly being researched due to the continuous decline in cash payments and the emergence of private stablecoins such as Libra. While CBDC offers various advantages for central banks, sensitive transaction and holdings data of individuals and users need to be protected. This paper analyses how privacy in payment is being discussed in CBDC related literature and pilot projects of central banks. Central banks rarely identify privacy as a key requirement in the development and implementation of a CBDC. Instead, anonymity is seen as one possible feature of a CBDC that could hinder know-your-customer (KYC) and anti-money laundering (AML) compliance of banks. In pilot projects, different techniques and solutions have been proposed to achieve varying levels of privacy for users. A comprehensive framework on how best to achieve privacy in retail CBDC is needed. Such a framework should consider the differing underlying design aspects of a CBDC and the use cases for which the CBDC is to be developed.

show abstract

Fair Exchange and Anonymous E-Commerce by Deploying Clone-Resistant Tokens

Cited by 6 publications

References 15 publications

GhostBuy : An All-Steps Anonymous Purchase Platform (ASAPP) based on Separation of Data

GhostBuy : An All-Steps Anonymous Purchase Platform (ASAPP) based on Separation of Data

SRAM-SUC: Ultra-Low Latency Robust Digital PUF

Privacy in Payment in the Age of Central Bank Digital Currency

Contact Info

Product

Resources

About