P2OFE: Privacy-Preserving Optimistic Fair Exchange of Digital Signatures

Huang, Qiong; Wong, Duncan S.; Susilo, Willy

doi:10.1007/978-3-319-04852-9_19

Cited by 13 publications

(6 citation statements)

References 31 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Only the verifier who possesses appropriate credentials (issued by a credential center according to its attributes) can convert the signer's partial signature into a full one. It is worthy to notice that the schemes proposed in [20,21,23,24] are secure in the certifiedkey model, while the schemes proposed in this work and [37] are secure in the chosen-key model.…”

Section: Related Workmentioning

confidence: 87%

“…This notion was further improved very recently. Privacy-preserving OFE was proposed in [24], in which the arbitrator could not learn the full signature even after the resolution process. Very recently, another variant of AOFE called Attributed-based Optimistic Fair Exchange, was introduced in [37], which integrates the advantage of both AOFE and (Ciphertext-Policy) Attributed-Based Encryption.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

Ambiguous optimistic fair exchange: Definition and constructions

Huang

Yang

Wong

et al. 2015

Theoretical Computer Science

Self Cite

View full text Add to dashboard Cite

Optimistic fair exchange (OFE) is a protocol for solving the problem of exchanging items or services in a fair manner between two parties, a signer and a verifier, with the help of an arbitrator which is called in only when a dispute happens between the two parties. In almost all the previous work on OFE, after obtaining a partial signature from the signer, the verifier can present it to others and show that the signer has indeed committed itself to something corresponding to the partial signature evenprior to the completion of the transaction. In some scenarios, this capability given to the verifier may be harmful to the signer. In this paper, we propose the notion of ambiguous optimistic fair exchange(AOFE), which is a variant of OFE andrequires additionally that the verifier cannot convince anybody about the authorship of a partial signature generated by the signer. We present a formal security model for AOFE in the multi-user setting and chosen-key model, and propose a generic construction of AOFE that is provably secure under our model. Furthermore, we propose an efficient instantiation of the generic construction, security of which is based on Strong Diffie-Hellman assumption and Decision Linear assumption without random oracles. AbstractOptimistic fair exchange (OFE) is a protocol for solving the problem of exchanging items or services in a fair manner between two parties, a signer and a verifier, with the help of an arbitrator which is called in only when a dispute happens between the two parties. In almost all the previous work on OFE, after obtaining a partial signature from the signer, the verifier can present it to others and show that the signer has indeed committed itself to something corresponding to the partial signature even prior to the completion of the transaction. In some scenarios, this capability given to the verifier may be harmful to the signer. In this paper, we propose the notion of ambiguous optimistic fair exchange (AOFE), which is a variant of OFE, requires additionally that the verifier cannot convince anybody about the authorship of a partial signature generated by the signer. We present a formal security model for AOFE in the multi-user setting and chosen-key model, and propose a generic construction of AOFE that is provably secure under our model. Furthermore, we propose an efficient instantiation of the generic construction, security of which is based on Strong Diffie-Hellman assumption and Decision Linear assumption without random oracles.

show abstract

Section: Related Workmentioning

confidence: 87%

Section: Related Workmentioning

confidence: 99%

Ambiguous optimistic fair exchange: Definition and constructions

Huang

Yang

Wong

et al. 2015

Theoretical Computer Science

Self Cite

View full text Add to dashboard Cite

show abstract

“…In addition to that, these protocols normally use non-repudiation mechanisms in order to generate evidence that proves the behavior of the actors of the protocol, so that, in case of dispute, an external arbitrator can evaluate them and make an unambiguous decision to guarantee the fairness of the exchange. Then, current fair exchange protocols [16], [17], [28] include the intervention of TTPs that have similar functions to what we could call an electronic notary or a judge.…”

Section: B Fairness and Ttps In Exchange Protocolsmentioning

confidence: 99%

Blockchain-Based System for Multiparty Electronic Registered Delivery Services

2019

View full text Add to dashboard Cite

European Regulation (EU) 910/2014 lays down the rules for electronic identification and trust services for electronic transactions. Qualified Electronic Registered Delivery is one of the trust services included in the regulation, and it requires nonrepudiation of origin and reception together with the integrity of the data. This kind of services usually relies heavily on the use of trusted third parties. These entities are an obstacle to extend the use of protocols. In this paper, we use the blockchain-based technologies to provide, for the first time, two multiparty registered eDelivery schemes that reduce the involvement of trusted third parties compared with traditional approaches while satisfying the requirements of the norms created by the European Union for registered eDeliveries. Since confidentiality is not considered a compulsory property in the directive, we propose two protocols. The first one is well suited for those deliveries that do not require the confidentiality of the message or delivered data or even for those in which it is required that the message can be public and accessible to everybody. The second solution for multiparty registered eDelivery allows the message to be hidden to others than the receiver. We present the smart contracts for both proposals and also a complete analysis of their properties and performance.INDEX TERMS Blockchain, registered electronic delivery services, certified notifications, smart contract, confidentiality, fairness, cryptocurrencies, certified electronic mail.

show abstract

“…The TTPs are responsible for the resolution of all the conflicts that can arise among the parties as a result of a non concluded exchange or a fraud attempt. Current fair exchange protocols, as [11], [12], [21] involve TTPs in several degrees, with similar functions to those of a judge or notary. Nevertheless, the acceptance of TTPs can be an obstacle to generalize the use of this kind of protocols.…”

Section: Introductionmentioning

confidence: 99%

Removing the Trusted Third Party in a Confidential Multiparty Registered eDelivery Protocol Using Blockchain

2020

View full text Add to dashboard Cite

Recently several proposals of blockchain-based solutions for traditional e-commerce applications have been presented, taking advantage of the fact that blockchain is a technology that offers an immutable registry of data. Among these proposals we can find solutions for certified notifications, digital signature of contracts, escrow protocols, fair payments and registered deliveries. In order to execute fair exchanges, most solutions involve trusted third parties, known as TTP, supervising the exchanges in a way or another. Until now, two solutions have been presented for Registered electronic Delivery (eDelivery) services. This service allows a user to prove that he has sent some data to a set of receivers. These protocols differ in the properties achieved and also in the use of trusted third parties. The first protocol is a blockchainbased solution without TTP for the eDelivery of non-confidential data. The second protocol allows also the eDelivery of confidential data. However, this second proposal requires the involvement of a TTP in a nonmandatory resolution phase. In this paper we present a new protocol that achieves the best properties of the previous solutions at the same time. The new protocol doesn't require the involvement of a TTP at any moment while it allows the eDelivery of confidential data, satisfying the security requirements for this service.

show abstract

P2OFE: Privacy-Preserving Optimistic Fair Exchange of Digital Signatures

Cited by 13 publications

References 31 publications

Ambiguous optimistic fair exchange: Definition and constructions

Ambiguous optimistic fair exchange: Definition and constructions

Blockchain-Based System for Multiparty Electronic Registered Delivery Services

Removing the Trusted Third Party in a Confidential Multiparty Registered eDelivery Protocol Using Blockchain

Contact Info

Product

Resources

About