Design, implementation, and deployment of the iKP secure electronic payment system

IEEE Journal on Selected Areas in Communications

Volumn 18, Issue 4, 2000, Pages 611-627

  Bellare, Mihir ^a   Garay, Juan A ^b   Hauser, Ralf ^c   Herzberg, Amir ^d   Krawczyk, Hugo ^e,f   Steiner, Michael ^g,h   Tsudik, Gene ⁱ   Van Herreweghen, Els ^h   Waidner, Michael ^h  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b LUCENT TECHNOLOGIES   (United States)

^c MCKINSEY AND COMPANY   (United States)

^d IBM HAIFA RESEARCH LAB   (Israel)

^e TECHNION ISRAEL INSTITUTE OF TECHNOLOGY   (Israel)

^f IBM T J WATSON RESEARCH CENTER   (United States)

^g SAARLAND UNIVERSITY   (Germany)

^h IBM RESEARCH ZURICH   (Switzerland)

ⁱ UNIVERSITY OF SOUTHERN CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CRYPTOGRAPHY; ELECTRONIC COMMERCE; INTERNET; NETWORK PROTOCOLS;

CREDIT CARDS; DEBIT CARDS; ELECTRONIC PAYMENT SYSTEMS; MULTIPARTY SECURITY; PUBLIC-KEY CRYPTOGRAPHY;

SECURITY OF DATA;

EID: 0033731024     PISSN: 07338716     EISSN: None     Source Type: Journal    
DOI: 10.1109/49.839936     Document Type: Article

References (35)

1. P. Wallich, "Cyber view: How to steal millions in champ change," Sci. Amer., pp. 32-33, Aug. 1999.
2. R. Anderson, "Why cryptosystems fail," Commun. ACM, vol. 37, no. 11, pp. 32-41, Nov. 1991.
3. A. O. Freier, P. Kariton, and P. C. Kocher, "The SSL protocol: Version 3.0,", will eventually be replaced by TLS[7], 1996.
4. S. Kent and R. Atkinson, "Security architecture for the Internet Protocol,", Internet RFC 2401, Nov. 1998.
5. "Mastercard and Visa," SET Secure Electronic Transactions Protocol, version 1.0 ed., May 1997, Book One: Business Specifications, Book Two: Technical Specification, Book Three: Formal Protocol Definition. Available from .
6. N. Asokan, P. Janson, M. Steiner, and M. Waidner, "State of the art in electronic payment systems," IEEE Computer, vol. 30, pp. 28-35, Sept. 1997, .
7. T. Dierks and C. Allen, "The TLS protocol version 1.0," in Internet RFC 2246, Jan. 1999.
8. W. R. Cheswick and S. M. Bellovin, Firewalls and Internet Security - Repelling the Wily Hacker. Reading, MA: Addison-Wesley, 1994, Professional Computing Series.
9. P.-C. Cheng, J. Garay, A. Herzberg, and H. Krawczyk, "A security architecture for the internet protocol," IBM Syst. J., Special Issue Internet, updated version of [31], vol. 37, no. 1, pp. 42-60, 1998.
10. N. Asokan, V. Shoup, and M. Waidner, "Asynchronous protocols for optimistic fair exchange," in Proc. IEEE Symp. Res. Security Privacy, Research in Security and Privacy. Oakland, CA, May 1998, Revised version available, a minor mistake in the proceedings version was fixed, pp. 86-99.
11. N. Asokan, "Fairness in electronic commerce," Ph.D. thesis, Univ. Waterloo, May 1998.
12. R. Rivest, "The MD5 message-digest algorithm,", Internet RFC 1321, Apr. 1992.
13. "NIST National Institute of Standards and Technology (Computer Systems laboratory) Secure hash standard," in Federal Information Processing Standards Publication FIPS FUB 180-1, Apr. 1995.
14. M. Bellare, R. Canetti, and H. Krawczyk, "Keying hash functions for message authentication," in Advances in Cryptology - CRYPTO '96. Berlin, Germany: Springer-Verlag, number 1109 in Lecture Notes in Computer Science, 1996, pp. 1-15.
15. H. Krawczyk, "Blinding of credit card numbers in the SET protocol," in Proc. 3rd Conf. Financial Cryptography (FC'99) . Anguilla, British West Indies: Int. Financial Cryptography Assoc. (IFCA), Feb. 1999.
16. M. Bellare and P. Rogaway, "Optimal asymmetric encryption - How to encrypt with rsa," in Advances in Cryptology - EUROCRYPT '94, I. B. Damgard, Ed. Berlin, Germany: Spring-Verlag, 1994, Lecture Notes in Computer Science, final (revised) version appeared Nov. 19, 1995, pp. 92-111.
17. R. Cramer and V. Shoup, "A practical public key cryptosystem provably source against adaptive chosen ciphertext attack," in Advances in Cryptology - CRYPTO '98, H. Krawczyk, Ed. Berlin, Germany: Springer-Verlag, no. 1462 Lecture Notes in Computer Science, Aug. 1998, pp. 13-25.
18. E.-S. Chang and D. Dardailler, "Joint electronic payment initiative (jepi)," in JEPI: White paper, Apr. 1997.
19. M. Waidner, "Development of a secure electronic marketplace for Europe," in in Proc. 4th European Symp. Res. Computer Science, E. Bertino, H. Kurth, G. Martella, and E. Montolivo, Eds. Berlin, Germany: Springer-Verlag, no. 1146 in Lecture Notes in Computer Science, also published in: EDI Forum 9/2 (1996) 98-106, se also http://www.semper.org, Sept. 1996.
20. "SEMPER Consortium - Final report of project SEMPER," Deliverable D13 of ACTS project AC026, to appear in the LNCS Series, Springer-Verlag, Aug. 1999.
21. S. Halevi and H. Krawczyk, "Public-key cryptography and password protocols," in ACM Trans. Inform. Syst. Security, vol. 2, 1999, Preliminary version in Proc. 5th ACM Conf. Computer Commun. Security, 1998, pp. 122-131., pp. 25-60.
22. S. Halevi and H. Krawczyk, "Public-key cryptography and password protocols," in ACM Trans. Inform. Syst. Security, vol. 2, 1999, Preliminary version in Proc. 5th ACM Conf. Computer Commun. Security, 1998, pp. 122-131., pp. 25-60.
23. R. Hauser, M. Steiner, and M. Waidner, "Micropayments based on iKP," in IBM Res.: Res. Rep. 2791 (#89269), Feb. 1996.
24. S. Glassman, M. Manasse, M. Abadi, P. Gauthier, and P. Sobalvarrog, "The millicent protocol for inexpensive electronic commerce," in Proc. 4th Int. Conf. World-Wide Web. Boston, MA: MIT, Dec. 1995.
25. B. Cox, J. D. Taylor, and M. Sirbu, "NetBill security and transaction protocol," in Proc. 1st USENIX Workshop Electronic Commerce, July 1995.
26. S. Larsen, "Zurick iKP Prototype (ZiP): iKP Transaction Layer Functional Specification,": IBM Zurich Res. Lab., May 1996.
27. R. Hauser and M. Steiner, "Generic extensions of WWW browsers," in Proc. 1st USENIX Workshop Electronic Commerce, July 1995, pp. 147-154.
28. G. Tsudik, "Zürich iKP prototype: Protocol specification document," in IBM Res.: Res. Rep. RZ 2792, Feb. 1996.
29. E. Van Herreweghen, "Zurich iKP Prototype (ZiP): Certificate Library (CERT) Specification," IBM Zurich Res. Lab.,Feb. 1996.
30. M. Steiner, "Zurick iKP Prototype (ZiP): Cryptographic Library Specification," IBM Zurich Res. Lab., Mar. 1996.
31. M. ISO/IEC, "Information technology - Open systems interconnection - The directory: Authentication framework, same as ITU-T Rec. X.509," , June 1994.
32. P. Chen, J. Garay, A. Herzberg, and H. Krawcczyk, "Design and implementation of modular key management protocol and IP Secure Tunnel on AIX," in Proc. 5th USENIX UNIX Security Symp., Salt Lake City, UT, June 1995.
33. N. Asokan, V. Shoup, and M. Waidner, "Optimistic fair exchange of digital signatures," in Advances in Cryptology - EUROCRYPT '98, K. Nyberg, Ed. Berlin, Germany: Springer-Verlag, number 1403 in Lecture Notes in Computer Science, 1998.
34. USENIX, 1st USENIX Workshop on Electronic Commerce, NY, July 1995.
35. N. Asokan, P. Janson, M. Steiner, and M. Waidner, Nikkei Computer (in Japanese), Mar. 30, 1998 , pp. 195-201.