Non-repudiation with mandatory proof of receipt

ABSTRACT

Non-repudiation allows an exchange of data between two principals in such a manner that the principals cannot subsequently deny their participation in the exchange. Current non-repudiation schemes, while providing a mandatory proof of origin service, generally provide only discretionary proof of receipt since it is difficult to enforce the return of the proof of receipt by the recipient.In this paper a new scheme for achieving mandatory mutual non-repudiation is proposed, encompassing both mandatory proof of origin and mandatory proof of receipt. The fundamental feature of the scheme is that the proofs of origin and receipt are not exchanged until both principals have submitted their digitally signed evidence to a trusted third party intermediary. This ensures that if the non-repudiation protocol is not completed, neither principal can gain from the exchange. An added advantage is that the process of dispute arbitration is considerably simplified since a small number of rules are required to decide whether an alleged data exchange took place.

REFERENCES

• 1: [Barb91] Barbut, Jean-Louis, ETEBAC 5: The standard for secure data exchange between banks and their corporate customers. SECURICOM'91, 9th Worldwide Congress on Computer and Communications Security and Protection, (March 1991), 199- 214.
• 2: [CCITT88] CCITT. The directory - authentication framework. CCITT Rec. X.509, (1988).
• 3: [CS95] Coffey, T. and Saidha, P. A logical verification of a non-repudiation protocol. Report #67/95, Department of Electronics & Computer Engineering, University of Limerick, Ireland, (1995).
• 4: [DH76] Diffe, W. and Hellman, M. New directions in cryptography. IEEE Transactions on Information Theory, Vol. IT-22, No. 6, (Nov. 1976), 644-654.
• 5: [GGKL89] Gasser, M., Goldstein, A., Kaufman, C. and Lampson, B. The Digital distributed system security architecture, 1989 National Computer Security Conference, (1989).
• 6: Siegfried Herda, Non-repudiation: constituting evidence and proof in digital cooperation, Computer Standards & Interfaces, v.17 n.1, p.69-79, Jan. 1995 [doi>10.1016/0920-5489(94)00044-H]
• 7: [ISO89] ISO. Information processing systems - open systems interconnection - basic reference model - part 2: security architecture, ISO 7498-1, (1989).
• 8: [KBN88] Karp, B.C., Barker, L.K. and Nelson, L.D. The secure data network system, AT&T Technical Journal, (May/June 1988), 19-27.
• 9: [Linn91] Linn, J. Privacy-enhanced electronic mail: from architecture to implementation, Information Security, (1991), 233-243.
• 10: Weijun Wang , Tom Coffey, Network Security: Design of a Global Secure Link, Proceedings of the IFIP TC11, Eigth International Conference on Information Security: IT Security: The Need for International Cooperation, p.101-111, May 27-29, 1992

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS

Additional Classification:
  E. Data
  E.3 DATA ENCRYPTION
      Subjects: Public key cryptosystems

General Terms:
Design, Performance, Reliability, Standardization, Theory, Verification

Keywords:
digital signatures, dispute arbitration, non-repudiation, proof of origin, proof of receipt, public-key cryptography, security protocols