전자경매를 위한 보안 프로토콜

다국어 초록 (Multilingual Abstract)

Recently, Jaiswal et al. proposed a protocol to improve the multi-agent negotiation test-bed which was proposed by Collins et al. Using publish/subscribe system, time-release cryptography and anonymous communication, their protocol gives an improvement on the old one. However, it is shown that the protocol also has some security weaknesses: such as replay data attack and DOS (denial-of-service) attack, anonymity disclosure, collusion between customers and a certain supplier. So proposed protocol reduces DOS attack and avoids replay data attack by providing ticket token and deal sequence number to the supplier. And it is proved that the way that market generates random number to the supplier is better than the supplier do by himself in guaranteeing anonymity. Market publishes interpolating polynomial for sharing the determination process data. It avoids collusion between customer and a certain supplie.

참고문헌 (Reference)

1 "design and implementation of a secure multi-agent marketplace" 3 (3): 355-368, 2004

2 "Technical challenges of network anonymity" 29 (29): 306-324, 2006

3 "New efficient user identification and key distribution scheme providing enhanced security" 23 (23): 697-704, 2004

4 "Group-oriented undeniable signature schemes with a trusted center" 22 (22): 730-734, 1999

5 "General secret sharing scheme" 22 (22): 755-757, 1999

6 "General secret sharing and monotone functions" 22 (22): 755-757, 1999

7 "A smart card-based remote scheme for password authentication in multi-server internet services" 27 (27): 39-51, 2004

8 "A multi-agent negotiation testbed for contracting tasks with temporal and precedence constraints" 7 (7): 3557-, 2002

9 "A Payment Scheme for Broadcast Multimedia Streams" 668-673, 2001