Applications of HECC Cryptography in SET Protocol

XU Chun-xiang

2007-01-01

Abstract:SET protocol is one of the most important protocols in E-commerce.In this paper,HECC is introduced and analysed,it can reduce the storage and raise the speed of computing compare with other technologies,so it can be widely used in resource-limited terminals.

What problem does this paper attempt to address?

The balance between security and performance in electronic business

邓锦红,陈德人,苏斐琦

DOI: https://doi.org/10.3785/j.issn.1008-973X.2003.02.005

2003-01-01

Abstract:Security is an important element in the design of e-business sites. However, performance is the price to be paid for it. To learn how the mechanisms and protocols used to support security may impact system performance, an analysis of the security mechanisms such as TLS and SET protocol is provided. After identifying the dominant factor, i.e. bottleneck, Some auxiliary methods can be used to improve the performance of it. Dynamic load balancing, proxy servers and caches can be used for security at the network level; a combination of firewall and the single Sign-on technology can also be used at this level. For security at the server level, the use of cryptographic accelerator cards, more and faster processors, and the use of faster cryptographic algorithms can substantially reduce the time spent in the most expensive cryptographic operations so that performance is increased. In addition, an improved model based on Distributed Calculating environment and DES Cipher algorithm can effectively reduce the impact of security mechanisms on system performance.
FAIR EXCHANGE PROTOCOLS WITH OFF-LINE SEMI-TRUSTED THIRD PARTY

Xiao-ning JIANG,Cheng-qing YE,Xue-zeng PAN

2001-01-01

Journal of Computer Research and Development

Abstract:Electronic commerce is a main trend in Internet applications, which should be based on fair exchange. A new fair exchange protocol with off-line semi-trusted third party is proposed. It is also efficient in the sense that it only needs 4 messages in a transaction. In the meantime all messages are encrypted naturally, which makes it appealing over large open networks that have little or no physical security, such as Internet. It is based on publicly verifiable secret sharing (PVSS) theory.
A Fair and Effective Secure Electronic Transactions Protocols

尹存燕,谢俊元

DOI: https://doi.org/10.3969/j.issn.1001-3695.2002.01.022

2002-01-01

Abstract:The SET (Secure Electronic Transactions) is an secure credit card transactions protocol, designed by MasterCard and VISA.A fair and effective secure electronic transactions protocol (SET 1)based on SET is given in the paper.The present protocol not only maintains the characters of SET,but also attains the evidences of a transaction and sets the status of a transaction.Finally, the security,effectiveness and fairness of the protocol are discussed.
The design of HTTP-based cardholder registration software for SET

Shaohua Tang,Weihua Ma

DOI: https://doi.org/10.1109/HPC.2000.843539

2000-01-01

Abstract:SET (Secure Electronic Transaction) protocol is one of the most important industry standards in electronic commerce, and the SET registration is the fundamental of all other SET transactions. A brief introduction to SET registration procedures is described, and then the system architecture of the cardholder registration software is designed. Our scenario has been implemented, and the instances of SET registration message flows are presented.
Cryptanalysis in e-commerce: A novel arrangement procedure using DHEC-SAT upon elliptic curve cryptography

Fauziyah,Zhaoshun Wang

DOI: https://doi.org/10.1007/s11042-024-19028-8

IF: 2.577

2024-04-05

Multimedia Tools and Applications

Abstract:Cryptanalytic innovations are considered the most economical and useful method for guaranteeing information security across shared networks. Despite the tinier key magnitude of Elliptic Curve Cryptography (ECC) compared to common cryptanalysis schemes, the majority of scholars have employed cryptanalysis methods to deliver data reliability and verification. Besides, the computation attempt needed by Diffie Hellman-Elliptic Curve (DH-EC) for equal key dimensions is similar and delivers extra security advantages. The research offers a novel key arrangement procedure using DH-EC in the secure automatic transactions (SAT) setting (DHEC-SAT) to enhance data safety. The DHEC-SAT procedure effectively applied the keys in the SAT setting for online payment and was employed to decode and encode the validation data. The DHEC-SAT procedure is implemented for an entry of e-commerce payments to deliver great-degree security examination, fast verification, and the safety of the suggested Cryptanalytic scheme. The suggested DHEC-SAT generates highly secure systems regarding data size (168 bytes), computational period (4.34 ms), and communication costs (1271 bits), as contrasted to extant ECC procedures and PIN-enabled key arrangements.

computer science, information systems, theory & methods,engineering, electrical & electronic, software engineering
SETBOC--a New Secure Electronic Transaction Protocol Based on One-Way Certification Technique

黄少寅,陈勇,高传善

DOI: https://doi.org/10.3321/j.issn:1000-436x.2003.12.024

2003-01-01

Abstract:Traditional secure electronic transaction protocols such as SET adopts across identity certification strategy, thus has the followed flaws: protocol is very complex and efficiency of protocol is very low. Due to these flaws, we present a new secure electronic transaction protocol named SETBOC which based on one-way certification technique. Through the analysis the process flow of SETBOC, we prove that SETBOC can finish the identity certification among client, merchant and pay-gateway, keep respective information secret, satisfy the money atomicity, and has the characteristic of high run efficiency and easy to implement. SETBOC also provides a arbitrate strategy for the conflict between client and merchant.
A Secure and Efficient Remote User Authentication Scheme for Multi-server Environments Using ECC.

Junsong Zhang,Jian Ma,Xiong Li,Wendong Wang

DOI: https://doi.org/10.3837/tiis.2014.08.021

2014-01-01

KSII Transactions on Internet and Information Systems

Abstract:With the rapid growth of the communication technology, intelligent terminals (i.e. PDAs and smartphones) are widely used in many mobile applications. To provide secure communication in mobile environment, in recent years, many user authentication schemes have been proposed. However, most of these authentication schemes suffer from various attacks and cannot provide provable security. In this paper, we propose a novel remote user mutual authentication scheme for multi-server environments using elliptic curve cryptography (ECC). Unlike other ECC-based schemes, the proposed scheme uses ECC in combination with a secure hash function to protect the secure communication among the users, the servers and the registration center (RC). Through this method, the proposed scheme requires less ECC-based operations than the related schemes, and makes it possible to significantly reduce the computational cost. Security and performance analyses demonstrate that the proposed scheme can solve various types of security problems and can meet the requirements of computational complexity for low-power mobile devices.
Improvement to Information Transaction Model Based on SET Protocol

Mengjin Tian,Yuhang Yang,Jianhua Li

DOI: https://doi.org/10.3321/j.issn:1006-2467.1999.01.024

1999-01-01

Shanghai Jiaotong Daxue Xuebao/Journal of Shanghai Jiaotong University

Abstract:Upon the idea of electronic commerce, an information transaction model based on SET protocol was presented. The operation process was also-described. The highlights of the model include: a very low transaction costs for micropayments; protection of the privacy of the transaction; certified delivery mechanism which delivers information if and only if the customer has paid for them; and highly scalability.
Analysis of Security and Efficiency on Elliptic Curves Cryptosystems

Zhang Xianfeng,Qin Zhiguang,LIU Jinde

DOI: https://doi.org/10.3969/j.issn.1001-0548.2001.02.008

2001-01-01

Abstract:The security and efficiency of ECC are analyzed comparing with other public-key cryptosystems. It is shown that ECC can provide greater strength, higher speed and smaller keys than other systems. Thus ECC can get relatively high security with less cost and time delay, and can meet security requirements in some applications with limited bandwidth, computational power or storage space.
A Secure and Efficient E-Cheque Protocol from Chameleon Hash Function

Ying Sun,Jiwen Chai,Huihui Liang,Jianbing Ni,Yong Yu

DOI: https://doi.org/10.1109/INCoS.2013.87

2013-01-01

Abstract:The electronic cheque (E-cheque), a mode of electronic payments, makes it possible for the customers to remotely pay their products through the Internet. However, because of the openness of the network, the E-cheque is confronted with many secure threats when transferring via this public communication channel. Moreover, some resource limited devices such as smart phones are used in the electronic commerce as the Internet-enabled terminals. Thus, a secure and efficient E-cheque system is of critical importance that the customer can exchange with the merchants. In this paper, we propose an E-cheque protocol based on the chameleon hash function. In our protocol, if the customer generates a dud E-cheque, anyone is able to find a collusion of the chameleon hash and the secret key of the customer is disclosed. We further prove the security of the protocol against the malicious customer in the random oracle model. Compared with the previous E-cheque schemes, our protocol has the advantages of low computation and communication overheads.
Heterogeneous Broadcast Signcryption Scheme with Equality Test for IoVs

Yingzhe Hou,Yue Cao,Hu Xiong,Jiawen Kang,Chuan Heng Foh,Changyu Dong

DOI: https://doi.org/10.1109/tvt.2024.3443103

IF: 6.8

2024-01-01

IEEE Transactions on Vehicular Technology

Abstract:To ensure the privacy and security of charging services under Internet of Vehicles (IoVs) environment, it is critical to secure the charging stations (CSs) interaction with multiple electric vehicles (EVs). In this paper, we construct a heterogeneous broadcast signcryption protocol supporting equality test for IoVs (HBSC-ET), which addresses the communication problem between a CS and EVs featured with One-to-Many properties. In our design, the CS is allocated in public key infrastructure cryptosystem (PKI), while the EVs are equipped in identity-based cryptography (IBC). In order to address the restriction of EVs storage resources, the received ciphertexts at EV side, are alternatively uploaded to cloud server running equality test. Here, the cloud server legitimately executes the equality test, to determine whether two ciphertexts conclude the same message without unsigncryption. With this, the design HBSC-ET is advanced in terms of information utilization ratio. Finally, the rigorous experiment as well as performance analysis elaborate that our proposed scheme is more suitable for charging services in IoVs.
Protocols for Secure Computation of Set-Inclusion with the Unencrypted Method

Chen Zhenhua,Li Shundong,Wang Daoshun,Huang Qiong,Dong Lihong

DOI: https://doi.org/10.7544/issn1000-1239.2017.20160034

2017-01-01

Journal of Computer Research and Development

Abstract:The most existing protocols for secure computation of set-inclusion are based on multiple public-key encryption algorithms and cannot either be computed publicly, which makes the computation complexity high and the application range limited as well.To cope with these problems, we design two protocols for secure computation of set-inclusion with the unencrypted method.Protocol 1 first transforms the original problem into the scalar-product problem, and then solves it with the hard problem in cryptography.Next, we present the practical protocol 2 under a certain scenario with a third untrusted party, in which we solve the set-inclusion problem combing the bilinear pairing with the hard problem in cryptography.Lastly, we give the security proof of two protocols, the performance analysis and comparison with others.Both of our protocols employ neither any public-key encryption algorithm nor multiple matching searches so as to avoid the intricate procedures of key-generation, encryption and decryption.This makes our protocols more efficient and concise than the previously known.In addition, we extend the secure computation of set-inclusion to a new application scenario, in which we can determine the set-inclusion relation publicly without revealing the privacy of both sets even if the untrusted third party exists.
To Construct High Level Secure Communication System: CTMI is Not Enough

Sen Xu,Xiangjun Lu,Aidong Chen,Haifeng Zhang,Haihua Gu,Dawu Gu,Kaiyu Zhang,Zheng Guo,Junrong Liu

DOI: https://doi.org/10.1109/cc.2018.8543054

2018-01-01

China Communications

Abstract:Public key cryptographic（PKC） algorithms, such as the RSA, elliptic curve digital signature algorithm（ECDSA） etc., are widely used in the secure communication systems, such as OpenSSL, and a variety of information security systems. If designer do not securely implement them, the secret key will be easily extracted by side-channel attacks（SCAs） or combinational SCA thus mitigating the security of the entire communication system. Previous countermeasures of PKC implementations focused on the core part of the algorithms and ignored the modular inversion which is widely used in various PKC schemes. Many researchers believe that instead of straightforward implementation, constant time modular inversion（CTMI） is enough to resist the attack of simple power analysis combined with lattice analysis. However, we find that the CTMI security can be reduced to a hidden t-bit multiplier problem. Based on this feature, we firstly obtain Hamming weight of intermediate data through side-channel leakage. Then, we propose a heuristic algorithm to solve the problem by revealing the secret（partial and full） base of CTMI. Comparing previous nec-essary input message for masking filtering, our procedure need not any information about the secret base of the inversion. To our knowledge, this is the first time for evaluating the practical security of CTMI and experimental results show the fact that CTMI is not enough for high-level secure communication systems.
Experimental quantum e-commerce

Xiao-Yu Cao,Bing-Hong Li,Yang Wang,Yao Fu,Hua-Lei Yin,Zeng-Bing Chen

DOI: https://doi.org/10.1126/sciadv.adk3258

2024-01-14

Abstract:E-commerce, a type of trading that occurs at a high frequency on the Internet, requires guaranteeing the integrity, authentication and non-repudiation of messages through long distance. As current e-commerce schemes are vulnerable to computational attacks, quantum cryptography, ensuring information-theoretic security against adversary's repudiation and forgery, provides a solution to this problem. However, quantum solutions generally have much lower performance compared to classical ones. Besides, when considering imperfect devices, the performance of quantum schemes exhibits a significant decline. Here, for the first time, we demonstrate the whole e-commerce process of involving the signing of a contract and payment among three parties by proposing a quantum e-commerce scheme, which shows resistance of attacks from imperfect devices. Results show that with a maximum attenuation of 25 dB among participants, our scheme can achieve a signature rate of 0.82 times per second for an agreement size of approximately 0.428 megabit. This proposed scheme presents a promising solution for providing information-theoretic security for e-commerce.

Quantum Physics,Cryptography and Security,Applied Physics
Application of Hybrid Encryption Algorithm in Hardware Encryption Interface Card

Huiwei Yang

DOI: https://doi.org/10.1155/2022/7794209

IF: 1.968

2022-05-31

Security and Communication Networks

Abstract:In order to effectively solve the increasingly prominent network security problems, cryptographic algorithm is the key factor affecting the effectiveness of IPSec VPN encryption. Therefore, this paper mainly studies cryptographic algorithms and puts forward the following solutions: briefly analyze the concept and function of IPSec VPN, as well as the basic theoretical knowledge of IPSec Security Protocol and cryptography, and analyze the traditional cryptography, modern cryptography, symmetric cryptographic algorithms and asymmetric algorithms, and their security. At the same time, the executable and security performances of AES and DES algorithms are compared and analyzed. This paper studies the elliptic curve encryption algorithm ECC, expounds the mathematical basis of realizing the algorithm, and compares and analyzes the security performance and execution efficiency of ECC. Based on the above two algorithms, a hybrid encryption algorithm is proposed, and the realization mechanism of the hybrid encryption algorithm is studied and discussed. The hybrid encryption algorithm combines the advantages of ECC and AES. The algorithm selects 128-bit AES and 256-bit ECC. In order to better cover up plaintext C, AES is used to encrypt information. While enhancing security, speed is also considered. The improved encryption, decryption, and signature authentication algorithms are relatively safe and fast schemes. ECC algorithm is improved, and on this basis, ECC algorithm and AES algorithm are combined. Moreover, HMAC message authentication algorithm is added, and the performance of the improved algorithm is significantly improved.

computer science, information systems,telecommunications
Implementing ECC by Integrated Circuits Technology

白国强,陈弘毅

DOI: https://doi.org/10.3969/j.issn.1009-6868.2004.04.008

2004-01-01

Abstract:Elliptic Curve Cryptography (ECC) is a rather complicated algorithm. It is difficult to design an application specific integrated circuit (ASIC) to fully implement ECC. Presently, studies for ECC are mainly concentrated on implementations of various ECC algorithms, especially by the integrated circuits technology. After some existing hardware implementations of ECC being reviewed, this paper presents the research achievements that the Institute of Microelectronics of Tsinghua University has made in ECC chip development.
ECCHSC: Computationally and Bandwidth Efficient ECC-Based Hybrid Signcryption Protocol for Secure Heterogeneous Vehicle-to-Infrastructure Communications

Ikram Ali,Yong Chen,Chengwei Pan,Anjian Zhou

DOI: https://doi.org/10.1109/jiot.2021.3104010

IF: 10.6

2022-03-15

IEEE Internet of Things Journal

Abstract:Vehicular ad hoc networks (VANETs), an application of the Internet of Things (IoT) providing a better intelligent transportation system (ITS), has received substantial attention from both industry and academia. Heterogeneous vehicular communications in VANETs occur when both vehicles and the infrastructure use different cryptographic technologies to exchange safety messages. However, the safety messages between vehicles and the infrastructure are communicated wirelessly; therefore, security issues are a serious concern in this domain. The existing schemes secure the transmission of safety messages with respect to confidentiality, authentication, and nonrepudiation. However, they are inappropriate with respect to efficiency. They cause computational overhead on the receiver and bandwidth overhead in the communications. To cope with this, we propose an elliptic curve cryptosystem-based hybrid signcryption (ECCHSC) protocol that satisfies the security requirements (i.e., message confidentiality, message's source authentication, message integrity, nonrepudiation, and identity–anonymity) for heterogeneous vehicle-to-infrastructure (V2I) communications in a single logical step. This protocol allows secure transmission of a safety message from a vehicle using identity-based cryptography (IDC) to a roadside unit (RSU) using public-key infrastructure (PKI). In addition, the ECCHSC protocol enables the RSU to receive multiple ciphertexts, aggregate them, and de-signcrypt them simultaneously through the batch de-signcryption method, which further improves the performance. The ECCHSC protocol has indistinguishability against adaptive chosen ciphertext attacks (IND-CCA2) and existential unforgeability against adaptive chosen message attacks (EUF-CMAs) in the random oracle model (ROM). The performance analysis of our protocol demonstrates a significant reduction in computational overhead and in communication/storage overhead as c-mpared to the state-of-the-art schemes.

computer science, information systems,telecommunications,engineering, electrical & electronic
CryptoEmu: An Instruction Set Emulator for Computation Over Ciphers

Xiaoyang Gong,Dan Negrut

DOI: https://doi.org/10.48550/arXiv.2101.03403

2021-01-10

Abstract:Fully homomorphic encryption (FHE) allows computations over encrypted data. This technique makes privacy-preserving cloud computing a reality. Users can send their encrypted sensitive data to a cloud server, get encrypted results returned and decrypt them, without worrying about data breaches. This project report presents a homomorphic instruction set emulator, CryptoEmu, that enables fully homomorphic computation over encrypted data. The software-based instruction set emulator is built upon an open-source, state-of-the-art homomorphic encryption library that supports gate-level homomorphic evaluation. The instruction set architecture supports multiple instructions that belong to the subset of ARMv8 instruction set architecture. The instruction set emulator utilizes parallel computing techniques to emulate every functional unit for minimum latency. This project report includes details on design considerations, instruction set emulator architecture, and datapath and control unit implementation. We evaluated and demonstrated the instruction set emulator's performance and scalability on a 48-core workstation. CryptoEmu has shown a significant speedup in homomorphic computation performance when compared with HELib, a state-of-the-art homomorphic encryption library.

Cryptography and Security
Model of Chinese Debit Card Secure Electronic Transaction Payment

梁晋,梁峰,高振华,李琪

DOI: https://doi.org/10.3321/j.issn:0253-987X.2001.08.006

2001-01-01

Abstract:Secure electronic transaction (SET) protocol is studied for the Chinese debit card. The characteristics of Chinese debit card are analyzed. A model and its protocol for Chinese debit card SET payment are provided to optimize SET protocol and to solve the Chinese debit card SET payment problem. This model not only increases the performance of Chinese debit card SET payment, but also enhances the authentication of card holders identity.
A survey on implementations of homomorphic encryption schemes

Thi Van Thao Doan,Mohamed-Lamine Messai,Gérald Gavin,Jérôme Darmont

DOI: https://doi.org/10.1007/s11227-023-05233-z

IF: 3.3

2023-04-14

The Journal of Supercomputing

Abstract:With the increased need for data confidentiality in various applications of our daily life, homomorphic encryption (HE) has emerged as a promising cryptographic topic. HE enables to perform computations directly on encrypted data (ciphertexts) without decryption in advance. Since the results of calculations remain encrypted and can only be decrypted by the data owner, confidentiality is guaranteed and any third party can operate on ciphertexts without access to decrypted data (plaintexts). Applying a homomorphic cryptosystem in a real-world application depends on its resource efficiency. Several works compared different HE schemes and gave the stakes of this research field. However, the existing works either do not deal with recently proposed HE schemes (such as CKKS) or focus only on one type of HE. In this paper, we conduct an extensive comparison and evaluation of homomorphic cryptosystems’ performance based on their experimental results. The study covers all three families of HE, including several notable schemes such as BFV, BGV, FHEW, TFHE, CKKS, RSA, El-Gamal, and Paillier, as well as their implementation specification in widely used HE libraries, namely Microsoft SEAL, PALISADE, and HElib. In addition, we also discuss the resilience of HE schemes to different kind of attacks such as indistinguishability under chosen plaintext attack and integer factorization attacks on classical and quantum computers.

computer science, theory & methods,engineering, electrical & electronic, hardware & architecture

Applications of HECC Cryptography in SET Protocol

The balance between security and performance in electronic business

FAIR EXCHANGE PROTOCOLS WITH OFF-LINE SEMI-TRUSTED THIRD PARTY

A Fair and Effective Secure Electronic Transactions Protocols

The design of HTTP-based cardholder registration software for SET

Cryptanalysis in e-commerce: A novel arrangement procedure using DHEC-SAT upon elliptic curve cryptography

SETBOC--a New Secure Electronic Transaction Protocol Based on One-Way Certification Technique

A Secure and Efficient Remote User Authentication Scheme for Multi-server Environments Using ECC.

Improvement to Information Transaction Model Based on SET Protocol

Analysis of Security and Efficiency on Elliptic Curves Cryptosystems

A Secure and Efficient E-Cheque Protocol from Chameleon Hash Function

Heterogeneous Broadcast Signcryption Scheme with Equality Test for IoVs

Protocols for Secure Computation of Set-Inclusion with the Unencrypted Method

To Construct High Level Secure Communication System: CTMI is Not Enough

Experimental quantum e-commerce

Application of Hybrid Encryption Algorithm in Hardware Encryption Interface Card

Implementing ECC by Integrated Circuits Technology

ECCHSC: Computationally and Bandwidth Efficient ECC-Based Hybrid Signcryption Protocol for Secure Heterogeneous Vehicle-to-Infrastructure Communications

CryptoEmu: An Instruction Set Emulator for Computation Over Ciphers

Model of Chinese Debit Card Secure Electronic Transaction Payment

A survey on implementations of homomorphic encryption schemes