Skip to main content
placeholder image

Ambiguous optimistic fair exchange: definition and constructions

Journal Article


Download full-text (Open Access)

Abstract


  • Optimistic fair exchange (OFE) is a protocol for solving the problem of exchanging items or services in a fair manner between two parties, a signer and a verifier, with the help of an arbitrator which is called in only when a dispute happens between the two parties. In almost all the previous work on OFE, after obtaining a partial signature from the signer, the verifier can present it to others and show that the signer has indeed committed itself to something corresponding to the partial signature evenprior to the completion of the transaction. In some scenarios, this capability given to the verifier may be harmful to the signer. In this paper, we propose the notion of ambiguous optimistic fair exchange(AOFE), which is a variant of OFE andrequires additionally that the verifier cannot convince anybody about the authorship of a partial signature generated by the signer. We present a formal security model for AOFE in the multi-user setting and chosen-key model, and propose a generic construction of AOFE that is provably secure under our model. Furthermore, we propose an efficient instantiation of the generic construction, security of which is based on Strong Diffie–Hellman assumption and Decision Linear assumption without random oracles.

  • Optimistic fair exchange (OFE) is a protocol for solving the problem of exchanging items or services in a fair manner between two parties, a signer and a verifier, with the help of an arbitrator which is called in only when a dispute happens between the two parties. In almost all the previous work on OFE, after obtaining a partial signature from the signer, the verifier can present it to others and show that the signer has indeed committed itself to something corresponding to the partial signature evenprior to the completion of the transaction. In some scenarios, this capability given to the verifier may be harmful to the signer. In this paper, we propose the notion of ambiguous optimistic fair exchange(AOFE), which is a variant of OFE andrequires additionally that the verifier cannot convince anybody about the authorship of a partial signature generated by the signer. We present a formal security model for AOFE in the multi-user setting and chosen-key model, and propose a generic construction of AOFE that is provably secure under our model. Furthermore, we propose an efficient instantiation of the generic construction, security of which is based on Strong Diffie–Hellman assumption and Decision Linear assumption without random oracles.

Publication Date


  • 2015

Citation


  • Huang, Q., Yang, G., Wong, D. & Susilo, W. (2015). Ambiguous optimistic fair exchange: definition and constructions. Theoretical Computer Science, 562 177-193.

Scopus Eid


  • 2-s2.0-84926388123

Ro Full-text Url


  • http://ro.uow.edu.au/cgi/viewcontent.cgi?article=4277&context=eispapers

Ro Metadata Url


  • http://ro.uow.edu.au/eispapers/3261

Number Of Pages


  • 16

Start Page


  • 177

End Page


  • 193

Volume


  • 562

Place Of Publication


  • Netherlands

Abstract


  • Optimistic fair exchange (OFE) is a protocol for solving the problem of exchanging items or services in a fair manner between two parties, a signer and a verifier, with the help of an arbitrator which is called in only when a dispute happens between the two parties. In almost all the previous work on OFE, after obtaining a partial signature from the signer, the verifier can present it to others and show that the signer has indeed committed itself to something corresponding to the partial signature evenprior to the completion of the transaction. In some scenarios, this capability given to the verifier may be harmful to the signer. In this paper, we propose the notion of ambiguous optimistic fair exchange(AOFE), which is a variant of OFE andrequires additionally that the verifier cannot convince anybody about the authorship of a partial signature generated by the signer. We present a formal security model for AOFE in the multi-user setting and chosen-key model, and propose a generic construction of AOFE that is provably secure under our model. Furthermore, we propose an efficient instantiation of the generic construction, security of which is based on Strong Diffie–Hellman assumption and Decision Linear assumption without random oracles.

  • Optimistic fair exchange (OFE) is a protocol for solving the problem of exchanging items or services in a fair manner between two parties, a signer and a verifier, with the help of an arbitrator which is called in only when a dispute happens between the two parties. In almost all the previous work on OFE, after obtaining a partial signature from the signer, the verifier can present it to others and show that the signer has indeed committed itself to something corresponding to the partial signature evenprior to the completion of the transaction. In some scenarios, this capability given to the verifier may be harmful to the signer. In this paper, we propose the notion of ambiguous optimistic fair exchange(AOFE), which is a variant of OFE andrequires additionally that the verifier cannot convince anybody about the authorship of a partial signature generated by the signer. We present a formal security model for AOFE in the multi-user setting and chosen-key model, and propose a generic construction of AOFE that is provably secure under our model. Furthermore, we propose an efficient instantiation of the generic construction, security of which is based on Strong Diffie–Hellman assumption and Decision Linear assumption without random oracles.

Publication Date


  • 2015

Citation


  • Huang, Q., Yang, G., Wong, D. & Susilo, W. (2015). Ambiguous optimistic fair exchange: definition and constructions. Theoretical Computer Science, 562 177-193.

Scopus Eid


  • 2-s2.0-84926388123

Ro Full-text Url


  • http://ro.uow.edu.au/cgi/viewcontent.cgi?article=4277&context=eispapers

Ro Metadata Url


  • http://ro.uow.edu.au/eispapers/3261

Number Of Pages


  • 16

Start Page


  • 177

End Page


  • 193

Volume


  • 562

Place Of Publication


  • Netherlands