• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>Applied Cryptography and Network Security >Replay Attack in a Fair Exchange Protocol
【24h】

Replay Attack in a Fair Exchange Protocol

机译：在公平交换协议中重播攻击

获取原文
获取原文并翻译 | 示例
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

A fair multi-party exchange protocol provides equal treatment to all users, in such a way that at the end of the execution of the exchange, all parties have the element that wished to obtain, or none of them has obtained any valid item. In this paper, we analyse a well-known multi-party fair exchange protocol and, in spite of the formal proof of its correctness given in [11], we demonstrate that the protocol has a flaw. The weakness provoked by this flaw made possible a replay attack that breaks the fairness of the exchange. We will see as a group of colluding participants in the exchange can get the item from an honest participant and this participant will get nothing. In addition to that, we propose a new protocol to solve the problem of the potential replay attack which preserves the property of semi-trusted neutral party. The property was introduced in the original protocol so as to improve the user confidence in the trusted third party (TTP). Our solution not only preserves this property but also introduces the property of verifiable TTP. The property guaranties evidences from each TTP operation to the users. The evidences can be used to get compensation and correct any wrong situation caused by an incorrect operation of the TTP; for instance, in case of a passive conspiracy of the TTP.
机译：公平的多方交换协议为所有用户提供了平等的待遇，使得交换执行结束时，所有各方都拥有希望获取的元素，或者任何一方都没有获取任何有效的物品。在本文中，我们分析了一种著名的多方公平交换协议，尽管在[11]中给出了其正确性的形式证明，但我们仍证明该协议存在缺陷。由该缺陷引起的弱点使得重播攻击成为可能，从而破坏了交换的公平性。我们将看到，交流中的一组串通参与者可以从诚实的参与者那里获得项目，而该参与者将一无所获。除此之外，我们提出了一种新的协议来解决潜在的重放攻击问题，该协议保留了半信任中立方的财产。该属性是在原始协议中引入的，目的是提高用户对可信第三方（TTP）的信心。我们的解决方案不仅保留了此属性，而且还引入了可验证TTP的属性。财产保证每次TTP操作向用户提供证据。这些证据可用于获得赔偿，并纠正由于TTP操作不当引起的任何错误情况；例如，在TTP的阴谋阴谋的情况下。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号