Multiparty nonrepudiation: A survey

ABSTRACT

Nonrepudiation is a security service that plays an important role in many Internet applications. Traditional two-party nonrepudiation has been studied intensively in the literature. This survey focuses on multiparty scenarios and provides a comprehensive overview. It starts with a brief introduction of fundamental issues on nonrepudiation, including the types of nonrepudiation service and cryptographic evidence, the roles of trusted third-party, nonrepudiation phases and requirements, and the status of standardization. Then it describes the general multiparty nonrepudiation problem, and analyzes state-of-the-art mechanisms. After this, it presents in more detail the 1-N multiparty nonrepudiation solutions for distribution of different messages to multiple recipients. Finally, it discusses advanced solutions for two typical multiparty nonrepudiation applications, namely, multiparty certified email and multiparty contract signing.

REFERENCES

• 1: N. Asokan, Fairness in electronic commerce, University of Waterloo, Waterloo, Ont., Canada, 1998
• 2: Asokan, N., Baum-Waidner, B., Schunter, M., and Waidner, M. 1998. Optimistic synchronous multi-party contract signing. Tech. Rep. RZ 3089, IBM Zurich Research Lab.
• 3: Asokan, N., Schunter, M., and Waidner, M. 1996. Optimistic protocols for multi-party fair exchange. Tech. Rep. RZ 2892 (no. 90840), IBM, Zurich Research Laboratory.
• 4: N. Asokan , Matthias Schunter , Michael Waidner, Optimistic protocols for fair exchange, Proceedings of the 4th ACM conference on Computer and communications security, p.7-17, April 01-04, 1997, Zurich, Switzerland [doi>10.1145/266420.266426]
• 5: Asokan, N., Shoup, V., and Waidner, M. 2000. Optimistic fair exchange of digital signatures. IEEE J. Selected Areas Commun. 18, 4, 593--610.
• 6: Ateniese, G., de Medeiros, B., and Goodrich, M. T. 2001. TRICERT: A distributed certified e-mail scheme. In Proceedings of the Symposium on Network and Distributed System Security.
• 7: Bao, F., Deng, R., and Mao, W. 1998. Efficient and practical fair exchange protocols with off-line ttp. In Proceedings of the IEEE Symposium on Security and Privacy. IEEE, 77--85.
• 8: Feng Bao , Robert Deng , Khanh Quoc Nguyen , Vijay Varadharajan, Multi-Party Fair Exchange with an Off-Line Trusted Neutral Party, Proceedings of the 10th International Workshop on Database & Expert Systems Applications, p.858, September 01-03, 1999
• 9: Birgit Baum-Waidner, Optimistic Asynchronous Multi-party Contract Signing with Reduced Number of Rounds, Proceedings of the 28th International Colloquium on Automata, Languages and Programming,, p.898-911, July 08-12, 2001
• 10: Baum-Waidner, B. and Waidner, M. 1998. Optimistic asynchronous multi-party contract signing. Tech. Rep. RZ 3078, IBM Zurich Research Lab.
• 11: Birgit Baum-Waidner , Michael Waidner, Round-Optimal and Abuse Free Optimistic Multi-party Contract Signing, Proceedings of the 27th International Colloquium on Automata, Languages and Programming, p.524-535, July 09-15, 2000
• 12: Blum, M. 1981. Three applications of the oblivious transfer: Part I: Coin flipping by telephone; part II: How to exchange secrets; part III: How to send certified electronic mail. Tech. Rep., Department of Electrical Engineering and Computer Science, University of California.
• 13: Brannigan, C. 2004. Beyond e-commerce: Expanding the potential of online dispute resolution. Interact. 16, 4, 15--17.
• 14: Rohit Chadha , Steve Kremer , Andre Scedrov, Formal Analysis of Multi-Party Contract Signing, Proceedings of the 17th IEEE workshop on Computer Security Foundations, p.266, June 28-30, 2004 [doi>10.1109/CSFW.2004.10]
• 15: Guang-huei Chiou , Wen-Tsuen Chen, Secure Broadcasting Using the Secure Lock, IEEE Transactions on Software Engineering, v.15 n.8, p.929-934, August 1989 [doi>10.1109/32.31350]
• 16: R. DeMillo , M. Merritt, Protocols for Data Security, Computer, v.16 n.2, p.39-51, February 1983 [doi>10.1109/MC.1983.1654298]
• 17: Shimon Even , Oded Goldreich , Abraham Lempel, A randomized protocol for signing contracts, Communications of the ACM, v.28 n.6, p.637-647, June 1985 [doi>10.1145/3812.3818]
• 18: Josep Lluís Ferrer-Gomila , Magdalena Payeras-Capellà , Llorenç Huguet i Rotger, Efficient Optimistic N-Party Contract Signing Protocol, Proceedings of the 4th International Conference on Information Security, p.394-407, October 01-03, 2001
• 19: Josep Lluís Ferrer-Gomila , Magdalena Payeras-Capellà , Llorenç Huguet i Rotger, A Realistic Protocol for Multi-party Certified Electronic Mail, Proceedings of the 5th International Conference on Information Security, p.210-219, September 30-October 02, 2002
• 20: Ferrer-Gomila, J. L., Payeras-Capellà, M., and Huguet-Rotger, L. 2004. Optimality in asynchronous contract signing protocols. In Proceedings of the 1st International Conference on Trust and Privacy in Digital Business, vol. 3184. Springer, 200--208.
• 21: Matthew K. Franklin , Gene Tsudik, Secure Group Barter: Multi-party Fair Exchange with Semi-Trusted Neutral Parties, Proceedings of the Second International Conference on Financial Cryptography, p.90-102, February 23-25, 1998
• 22: Juan A. Garay , Philip D. MacKenzie, Abuse-Free Multi-party Contract Signing, Proceedings of the 13th International Symposium on Distributed Computing, p.151-165, September 27-29, 1999
• 23: González-Deleito, N. 2005. Trust reletionships in exchange protocols. Ph.D. thesis, Faculté des Sciences, Université Libre de Bruselles.
• 24: Nicolás González-Deleito , Olivier Markowitch, An Optimistic Multi-party Fair Exchange Protocol with Reduced Trust Requirements, Proceedings of the 4th International Conference Seoul on Information Security and Cryptology, p.258-267, December 06-07, 2001
• 25: Nicolás González-Deleito , Olivier Markowitch, Exclusion-Freeness in Multi-party Exchange Protocols, Proceedings of the 5th International Conference on Information Security, p.200-209, September 30-October 02, 2002
• 26: Gürgens, S. and Rudolph, C. 2002. Security analysis of (un-) fair non-repudiation protocols. In Formal Aspects of Security. Lecture Notes in Computer Science, vol. 2629. Spinger, 99--114.
• 27: Gürgens, S., Rudolph, C., and Vogt, H. 2003. On the security of fair non-repudiation protocols. In Proceedings of the International Conference on Information Security (ITC). Lecture Notes in Computer Sciences, vol. 2851. Springer, 193--207.
• 28: ISO/IEC. 1991. 1st WD 13888-2. non-repudiation Using a Symmetric Key Algorithm. JTC1/SC27/WG2 N83. ISO/IEC.
• 29: ISO/IEC. 1996. DIS 10181-4. Information Technology—Open Systems Interconnection—Security Frameworks in Open Systems—Part 4: non-repudiation. ISO/IEC.
• 30: ISO/IEC. 1997. 2nd CD 13888-3. Information Technology—Security Techniques—non-repudiation—Part 3: Using Asymmetric Techniques. JTC1/SC27 N1379. ISO/IEC.
• 31: ISO/IEC. 1998. 3rd CD 13888-2. Information Technology—Security Techniques—non-repudiation—Part 2: Using Symmetric Encipherment Algorithms. JTC1/SC27 N1276. ISO/IEC.
• 32: ISO/IEC. 2004. 13888-1. Information Technology—Security Techniques—non-repudiation—Part 1: General Model. JTC1/SC27. ISO/IEC.
• 33: ITU-T X.509. 2000. Information Technology—Open Systems Interconnection—The Directory: Public-Key and Attribute Certificate Frameworks. ITU-T X.509.
• 34: ITU-T X.813. 1996. Information Technology—Open Systems Interconnection—Security Frameworks for Open Systems: non-repudiation Framework. ITU-T X.813.
• 35: Khill, I., Kim, J., Han, I., and Ryou, J. 2001. Multi-Party fair exchange protocol using ring architecture model. Comput. Secur. 20, 5, 422--439.
• 36: Steve Kremer , Olivier Markowitch, A Multi-Party Non-Repudiation Protocol, Proceedings of the IFIP TC11 Fifteenth Annual Working Conference on Information Security for Global Information Infrastructures, p.271-280, August 22-24, 2000
• 37: Kremer, S. and Markowitch, O. 2000b. Optimistic non-repudiable information exchange. In Proceedings of the 21st Symposium on Information Theory in the Benelux, J. Biemond, ed. Werkgemeenschap Informatie-en Communicatietheorie, 139--146.
• 38: Kremer, S., Markowitch, O., and Zhou, J. 2002. An intensive survey of fair non-repudiation protocols. Comput. Commun. 25, 17 (Nov.), 1606--1621.
• 39: Yehuda Lindell, Composition of Secure Multi-Party Protocols: A Comprehensive Study, SpringerVerlag, 2003
• 40: Markowitch, O., Gollmann, D., and Kremer, S. 2002. On fairness in exchange protocols. In Proceedings of the 5th International Conference on Information Security and Cryptology. Lecture Notes in Computer Science, vol. 2587. Springer, 451--464.
• 41: Olivier Markowitch , Steve Kremer, A Multi-party Optimistic Non-repudiation Protocol, Proceedings of the Third International Conference on Information Security and Cryptology, p.109-122, December 08-09, 2000
• 42: Markowitch, O. and Roggeman, Y. 1999. Probabilistic non-repudiation without trusted third party. In Proceedings of the 2nd Workshop on Security in Communication Networks.
• 43: Olivier Markowitch , Shahrokh Saeednia, Optimistic Fair Exchange with Transparent Signature Recovery, Proceedings of the 5th International Conference on Financial Cryptography, p.339-350, February 19-22, 2002
• 44: Maurer, U. 2004. New approaches to digital evidence. In Proc. IEEE. 92, IEEE, 933--947.
• 45: Silvio Micali, Simple and fast optimistic protocols for fair electronic exchange, Proceedings of the twenty-second annual symposium on Principles of distributed computing, p.12-19, July 13-16, 2003, Boston, Massachusetts [doi>10.1145/872035.872038]
• 46: D. Mills, Network Time Protocol (Version 3) Specification, Implementation, RFC Editor, 1992
• 47: Onieva, J. A., Zhou, J., Carbonell, M., and Lopez, J. 2003. A multi-party non-repudiation protocol for exchange of different messages. In Proceedings of the 18th IFIP International Information Security Conference. Security and Privacy in the Age of Uncertainty. IFIP/Kluwer Academic Publishers, 37--48.
• 48: Onieva, J. A., Zhou, J., and Lopez, J. 2004. Non-repudiation protocols for multiple entities. Comput. Commun. 27, 16, 1608--1616.
• 49: Birgit Pfitzmann , Matthias Schunter , Michael Waidner, Optimal efficiency of optimistic contract signing, Proceedings of the seventeenth annual ACM symposium on Principles of distributed computing, p.113-122, June 28-July 02, 1998, Puerto Vallarta, Mexico [doi>10.1145/277697.277717]
• 50: Shao, M.-H., Zhou, J., and Wang, G. 2005. On the security of a certified e-mail scheme with temporal authentication. In Proceedings of the ICCSA Workshop on Internet Communications Security. Lecture Notes in Computer Science, vol. 3482. Springer, 701--710.
• 51: Non-repudiation in electronic commerce, Artech House, Inc., Norwood, MA, 2001
• 52: Zhou, J. 2004. On the security of a multi-party certified email protocol. In Proceedings of the 6th International Conference on Information and Communications Security. Lecture Notes in Computer Science, vol. 3269, Springer, 40--52.
• 53: Jianying Zhou , D. Gollman, A fair non-repudiation protocol, Proceedings of the 1996 IEEE Symposium on Security and Privacy, p.55, May 06-08, 1996
• 54: Jianying Zhou , Dieter Gollmann, An Efficient Non-repudiation Protocol, Proceedings of the 10th IEEE workshop on Computer Security Foundations, p.126, June 10-12, 1997
• 55: Zhou, J., Onieva, J. A., and Lopez, J. 2005. Optimised multi-party certified email protocols. Inf. Manage. Comput. Secur. J. 13, 5, 350--366.
• 56: Zhou, J., Onieva, J. A., and Lopez, J. 2006. A synchronous multi-party contract signing protocol improving lower bound of steps. In Proceedings of the 21st IFIP International Information Security Conference Security and Privacy in Dynamic Environments. IFIP, vol. 201. Springer, 221--232.

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.4 COMPUTERS AND SOCIETY
      K.4.4 Electronic Commerce
          Subjects: Security

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.2 Network Protocols
          Subjects: Applications (SMTP, FTP, etc.)

  H. Information Systems
  H.4 INFORMATION SYSTEMS APPLICATIONS
      H.4.3 Communications Applications
          Subjects: Electronic mail

General Terms:
Security

Keywords:
Multiparty applications, multiparty protocols, nonrepudiation