Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

IEE Proceedings - Communications

Efficient fair digital-signature exchange based on misbehaviour penalisation

N. Zhang, Qi Shi, Aleksandra Nenadić, M. Merabti, Robert Askwith

Published Jan 1, 2005• 6 citations
Publisher

Abstract

A protocol is presented for the fair digital-signature exchange commonly seen in e-commerce systems. The protocol incorporates a novel approach for the recovery of a signature with the assistance of an offline trusted third party that can impose a penalty on a misbehaving party. This new approach enables the protocol to achieve fairness in a simpler and more efficient manner than other relevant fair exchange protocols, while being able to deter a dishonest party from misbehaving.

DOI
10.1049/ip-com:20045166

Related papers

Signature-based approach to fair document exchange

Qi Shi, N. Zhang, M. Merabti

The authors aim to present a protocol for fair document exchange between two parties, that incorporates a signature scheme based method for the recovery of a document decryption key. The principal idea for such key recovery is based on a verifiable and recoverable encryption of a key. This means that any party can verify the correctness of the key encrypted without actually viewing the key, and the party can be assured that a designated party can decrypt the encrypted key to recover the original key. A DSA (digital signature algorithm) is applied as an example to demonstrate how to implement such key encryption based on an off-line semi-trusted third party. The third party is off-line as they do not participate in an exchange in normal situations, and semi-trusted in the sense that they may misbehave but do not conspire with any party involved in the exchange. The main contribution of the paper is that it presents a fair document exchange protocol which is more efficient, simpler and easier to implement in comparison with related work.

IEE Proceedings - Communications•Jan 1, 2003•12 citations

A secure and fair DSA-based signature exchange protocol

Aleksandra Nenadić, Ning Zhang, S. Barton

This work presents a novel protocol for fair exchange of DSA-based signatures to support an e-commerce activity of digital contract signing. The protocol employs an off-line semitrusted third party (STTP), which participates in the protocol execution only in exceptional circumstances and which involvement in the protocol is transparent. The protocol can tolerate the STTP's own misbehaviour (i.e. if it does not collude with other participants of the protocol) and it prevents the STTP from gaining the exchanged signatures or the signed document. The protocol is based on the principle of verifiable and recoverable signature encryption, and in comparison with related protocols is more efficient.

IEEE Symposium on Computers and Communications (ISCC)•Jan 1, 2004•8 citations

A secure protocol for misbehavior-penalization-based fair digital signature exchange

Chia‐Chun Wu, Wei‐Bin Lee, Woei-Jiunn Tsaur

In 2005, Zhang et al. proposed a novel fair digital signature exchange protocol that can impose a penalty on the misbehaving party. However, we have discovered a weakness concerning the fairness aspect of the protocol which will occur when an initiator tries to exchange the signature of the same document to others again. That is, the latter exchange partner can obtain the initiator's valid signature with the help of the previous exchange partner without completing the protocol, and therefore the protocol is not fair enough. In this paper, the reason for the occurrence of the unfair exchange is discussed, and an improvement to remove the weakness is proposed.

International Wireless Communications and Mobile Computing Conference (IWCMC)•Aug 12, 2007•0 citations

Efficient and practical fair exchange protocols with off-line TTP

Feng Bao, Robert Huijie Deng, Wenbo Mao

We present protocols for fair exchange of electronic data (digital signatures, payment and confidential data) between two parties A and B. Novel properties of the proposed protocols include: 1) offline trusted third party (TTP), i.e., TTP does not take part in the exchange unless one of the parties behaves improperly; 2) only three message exchanges are required in the normal situation; 3) true fair exchange, i.e., either A and B obtain each other's data or no party receives anything useful; no loss can be incurred to a party no matter how maliciously the other party behaves during the exchange. This last property is in contrast to previously proposed protocols with offline TTP ([1] and [21]), where a misbehaving party may get another party's data while refusing to send his document to the other party, and the TTP can provide affidavits attesting to what happened during the exchange. To our knowledge, the protocols presented here are the first exchange protocols which use offline TTP and at the same time guarantee true fair exchange of digital messages. We introduce a novel cryptographic primitive, called the Certificate of Encrypted Message Being a Signature (CEMBS), as the basic building block of the fair exchange protocols. It is used to prove that an encrypted message is a certain party's signature on a public file, without revealing the signature. We also give two examples to show in detail how the certificate can be constructed.

IEEE Symposium on Security and Privacy (S&P)•Nov 27, 2002•295 citations

An identity-based scheme of fair exchange of digital signatures

Yong Hong Yu, Bo Yang, Yang Guoqing

Fair exchange of digital signatures is an important tool for signing digital contracts, e-payment and other electronic commerce actions. An ID-based scheme of fair exchange of digital signature is proposed in this paper. The protocol relies on a trusted third party, but is “optimistic”, in that the third party is only needed in cases where one player attempts to cheat or simply crashes. The proposed scheme has properties of short signature, low computation and verification cost. It can realize exchange of digital signatures fairly and efficiently. A key feature of our scheme is that it is identity-based, which needs no certificates and has a simple key management. To our best knowledge, this is the first identity-based scheme of fair exchange of digital signatures.

Wuhan University Journal of Natural Sciences•Nov 1, 2006•3 citations

New scheme of fair exchange of digital signatures

Yu Shang

Based on the verifiably encrypted signature scheme without random oracles recently proposed by Gorantla et al.,a new scheme of optimistic fair exchange of digital signatures is proposed in this paper.The two players firstly exchange their verifiably encrypted signature on agreed-upon messages then their ordinary signature after the verification of each other's verifiably encrypted signature.If one of them executes the protocol dishonestly,the other can resort to a trusted third party so as to get the purpose of fair exchange of signatures.The proposed scheme has properties of short signature,low computation and verification cost.It can realize exchange of digital signatures fairly and efficiently.

Computer Engineering and Applications Journal•Jan 1, 2008•1 citation
A protocol is presented for the fair digital-signature exchange commonly seen in e-commerce systems. The protocol incorporates a novel approach for the recovery of a signature with the assistance of an offline trusted third party that can impose a penalty on a misbehaving party. This new approach enables the protocol to achieve fairness in a simpler and more efficient manner than other relevant fair exchange protocols, while being able to deter a dishonest party from misbehaving.
The authors aim to present a protocol for fair document exchange between two parties, that incorporates a signature scheme based method for the recovery of a document decryption key. The principal idea for such key recovery is based on a verifiable and recoverable encryption of a key. This means that any party can verify the correctness of the key encrypted without actually viewing the key, and the party can be assured that a designated party can decrypt the encrypted key to recover the original key. A DSA (digital signature algorithm) is applied as an example to demonstrate how to implement such key encryption based on an off-line semi-trusted third party. The third party is off-line as they do not participate in an exchange in normal situations, and semi-trusted in the sense that they may misbehave but do not conspire with any party involved in the exchange. The main contribution of the paper is that it presents a fair document exchange protocol which is more efficient, simpler and easier to implement in comparison with related work.
This work presents a novel protocol for fair exchange of DSA-based signatures to support an e-commerce activity of digital contract signing. The protocol employs an off-line semitrusted third party (STTP), which participates in the protocol execution only in exceptional circumstances and which involvement in the protocol is transparent. The protocol can tolerate the STTP's own misbehaviour (i.e. if it does not collude with other participants of the protocol) and it prevents the STTP from gaining the exchanged signatures or the signed document. The protocol is based on the principle of verifiable and recoverable signature encryption, and in comparison with related protocols is more efficient.
In 2005, Zhang et al. proposed a novel fair digital signature exchange protocol that can impose a penalty on the misbehaving party. However, we have discovered a weakness concerning the fairness aspect of the protocol which will occur when an initiator tries to exchange the signature of the same document to others again. That is, the latter exchange partner can obtain the initiator's valid signature with the help of the previous exchange partner without completing the protocol, and therefore the protocol is not fair enough. In this paper, the reason for the occurrence of the unfair exchange is discussed, and an improvement to remove the weakness is proposed.
We present protocols for fair exchange of electronic data (digital signatures, payment and confidential data) between two parties A and B. Novel properties of the proposed protocols include: 1) offline trusted third party (TTP), i.e., TTP does not take part in the exchange unless one of the parties behaves improperly; 2) only three message exchanges are required in the normal situation; 3) true fair exchange, i.e., either A and B obtain each other's data or no party receives anything useful; no loss can be incurred to a party no matter how maliciously the other party behaves during the exchange. This last property is in contrast to previously proposed protocols with offline TTP ([1] and [21]), where a misbehaving party may get another party's data while refusing to send his document to the other party, and the TTP can provide affidavits attesting to what happened during the exchange. To our knowledge, the protocols presented here are the first exchange protocols which use offline TTP and at the same time guarantee true fair exchange of digital messages. We introduce a novel cryptographic primitive, called the Certificate of Encrypted Message Being a Signature (CEMBS), as the basic building block of the fair exchange protocols. It is used to prove that an encrypted message is a certain party's signature on a public file, without revealing the signature. We also give two examples to show in detail how the certificate can be constructed.
Fair exchange of digital signatures is an important tool for signing digital contracts, e-payment and other electronic commerce actions. An ID-based scheme of fair exchange of digital signature is proposed in this paper. The protocol relies on a trusted third party, but is “optimistic”, in that the third party is only needed in cases where one player attempts to cheat or simply crashes. The proposed scheme has properties of short signature, low computation and verification cost. It can realize exchange of digital signatures fairly and efficiently. A key feature of our scheme is that it is identity-based, which needs no certificates and has a simple key management. To our best knowledge, this is the first identity-based scheme of fair exchange of digital signatures.
Based on the verifiably encrypted signature scheme without random oracles recently proposed by Gorantla et al.,a new scheme of optimistic fair exchange of digital signatures is proposed in this paper.The two players firstly exchange their verifiably encrypted signature on agreed-upon messages then their ordinary signature after the verification of each other's verifiably encrypted signature.If one of them executes the protocol dishonestly,the other can resort to a trusted third party so as to get the purpose of fair exchange of signatures.The proposed scheme has properties of short signature,low computation and verification cost.It can realize exchange of digital signatures fairly and efficiently.