Designing a secure e-tender submission protocol

Authors:
Rong Du;Ernest Foo;Colin Boyd
Affiliations:
Information Security Institute, Faculty of Information Technology, Queensland University of Technology, Brisbane, Australia QLD 4001;Information Security Institute, Faculty of Information Technology, Queensland University of Technology, Brisbane, Australia QLD 4001;Information Security Institute, Faculty of Information Technology, Queensland University of Technology, Brisbane, Australia QLD 4001
Venue:
Electronic Commerce Research
Year:
2008

Citing 17
Cited 0

Identity-based cryptosystems and signature schemes

Proceedings of CRYPTO 84 on Advances in cryptology
How to share a secret

Communications of the ACM
Time-Stamping with Binary Linking Schemes

CRYPTO '98 Proceedings of the 18th Annual International Cryptology Conference on Advances in Cryptology
Timestamps: Main Issues on Their Use and Implementation

WETICE '99 Proceedings of the 8th Workshop on Enabling Technologies on Infrastructure for Collaborative Enterprises
An Auction Protocol Which Hides Bids of Losers

PKC '00 Proceedings of the Third International Workshop on Practice and Theory in Public Key Cryptography: Public Key Cryptography
M+1-st Price Auction Using Homomorphic Encryption

PKC '02 Proceedings of the 5th International Workshop on Practice and Theory in Public Key Cryptosystems: Public Key Cryptography
The HP time vault service: exploiting IBE for timed release of confidential information

WWW '03 Proceedings of the 12th international conference on World Wide Web
Distributed Auction Servers Resolving Winner and Winning Bid without Revealing Privacy of Bids

ICPADS '00 Proceedings of the Seventh International Conference on Parallel and Distributed Systems: Workshops
A fair non-repudiation protocol

SP '96 Proceedings of the 1996 IEEE Symposium on Security and Privacy
Defining security services for electronic tendering

ACSW Frontiers '04 Proceedings of the second workshop on Australasian information security, Data Mining and Web Intelligence, and Software Internationalisation - Volume 32
(Im)Possibility of Unconditionally Privacy-Preserving Auctions

AAMAS '04 Proceedings of the Third International Joint Conference on Autonomous Agents and Multiagent Systems - Volume 2
Implementing private Vickrey auctions

Proceedings of the 2005 ACM symposium on Applied computing
Improving privacy in Vickrey auctions

ACM SIGecom Exchanges
Formal analysis of secure contracting protocol for e-tendering

ACSW Frontiers '06 Proceedings of the 2006 Australasian workshops on Grid computing and e-research - Volume 54
Electronic auctions with private bids

WOEC'98 Proceedings of the 3rd conference on USENIX Workshop on Electronic Commerce - Volume 3
Secure distributed key generation for discrete-log based cryptosystems

EUROCRYPT'99 Proceedings of the 17th international conference on Theory and application of cryptographic techniques
Designing secure e-tendering systems

TrustBus'05 Proceedings of the Second international conference on Trust, Privacy, and Security in Digital Business

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper investigates the fundamental difference between a simple e-tender box and a traditional physical tender box, and highlights a series of security traps created by the functional differences. Based on our findings, we have defined the security requirements for an e-tender submission protocol. We also discuss functional limitations of cryptographic technologies. As a result, two secure e-tender submission protocols are proposed which enable a secure e-tender submission. Protocols are assumed to run under the condition that all tendering parties (principal and tenderers) are dishonest players. Our informal and formal security analysis show that these protocols meet their security goals under well known collusion scenarios. Because security is a process not a product, our approach will have broad industry application for developing secure electronic business processes in areas other than e-tendering.