Journal of Chinese Computer Systems
Security Analysis and Improvement of Fair Exchange Protocols Using the Theory of Cross Validation
Jianyun Lei
Abstract
Fair exchange protocol is an electronic commerce protocol that ensures that no player gains an unfair advantage over the other player by misbehaving misrepresenting or prematurely aborting the protocol. From 2000,Ray et al. proposed a series of fair exchange protocols based on the theory of cross validation. One of important contributions is that by using a pair of compatible keys to encrypt one product respectively,Ray's protocols allow a customer to verify that the product he is about to receive from the merchant is the same as the product he ordered,before the customer pays for the product. However,it is shown that in fact malicious merchant can easily provide the customer false product such that the authenticating equality is satisfied. The result is that the customer will be cheated and pay for the false product. In addition,improvement is provided to avoid the identified attacks.