A Dynamic Revocable Asymmetric Traitor-tracing Scheme

Bo Yang

2005-01-01

Abstract:Traitor tracing scheme is a branch of digital fingerprinting,which provides a useful tool for copyright protection.Based on the scheme in,a revocable asymmetric traitor-tracing scheme is proposed,which is more suitable to pratical use.

What problem does this paper attempt to address?

Novel Algorithm of Collusion Secure Fingerprint Coding and Traitor Tracing for Relational Database

朱勤,陈继红,乐嘉锦

DOI: https://doi.org/10.3969/j.issn.1002-137x.2008.08.067

2008-01-01

Computer Science

Abstract:It is necessary to provide secure mechanism to resist the piracy from the renegade users when databases are distributed as software products.In this paper,a scheme of traitor tracing for rational database based on digital fingerprinting is presented.In the proposed scheme,the database fingerprints are composed of copyright watermarks and user's fingerprints by using the chaos binary sequence,and are embedded into the database under the control of the secret key.The fingerprints are extracted and the traitors are traced based on the randomicity of the chaos binary sequence.This scheme is collision secure and computationally simplified.The algorithms of the fingerprint coding,embedment,detection and extraction are described.The robustness and the traitor tracing performance of the algorithms are analyzed theoretically as well as validated practically by experiments.
Trace and revoke systems with short ciphertexts

Lie Liu,Chun Yuan

DOI: https://doi.org/10.1145/1626195.1626212

2009-01-01

Abstract:Trace and revoke systems are motivated by content protection on various platforms such as DVD players, satellite radio receivers and PCs, which provide both broadcast encryption and traitor tracing mechanisms. So far, the best existing system requires ciphertext size sub-linear in the number of users. In communications, as system scale increases, it brings up a high bandwidth requirement which cannot be satisfied by current network condition. In this paper, we present a new fully collusion resistant trace and revoke system which has only constant size ciphertexts. The system is CPA secure against static adversaries with public broadcast key and secret tracing key. It can be efficiently applied in DRM fields where network bandwidth is limited.
A Traitor-Resistant and Dynamic Anonymous Communication Service for Cloud-Based VANETs

Huiying Hou,Jianting Ning,Yunlei Zhao,Robert H. Deng

DOI: https://doi.org/10.1109/tsc.2021.3071156

IF: 11.019

2022-01-01

IEEE Transactions on Services Computing

Abstract:Cloud-based VANETs are designed to enable communication between high-speed vehicles. In such a highly dynamic environment, how to provide secure and anonymous communication service is a challenge. In this article, we affirmatively address the challenge by proposing a traitor-resistant and dynamic anonymous communication framework (TD-ACF) for cloud-based VANETs, which supports several advantageous features. In TD-ACF, each vehicle is represented by a set of attributes instead of its real identity, and the driving data is transmitted in encrypted form. Therefore, the anonymous authentication and the confidentiality of driving data are achieved in this way. Meanwhile, TD-ACF supports two practical requirements in cloud-based VANETs: the revocation and the traceability of traitor. For the former, TD-ACF can force a vehicle to exit the communication network at any moment. We employ an efficient binary tree algorithm to reduce the size of key updates for revocation from the traditional linear to the logarithmic level. For the latter, we overcome the barrier of the one-to-many relationship between a vehicle and the shared set of attributes to support traitor tracing. In TD-ACF, unlike most existing schemes, the Semi-Trusted Cloud (STC) can directly capture and punish a traitor instead of querying all the records in the list of unrevoked vehicles. In addition, we solve the key escrow problem that plagues most existing attribute-based schemes. The theoretical analysis and experimental simulation show that the proposed scheme is feasible and effective.
A Note on the Security of KHL Scheme

Jian Weng,Yunlei Zhao,Robert H. Deng,Shengli Liu,Yanjiang Yang,Kouichi Sakurai

DOI: https://doi.org/10.1016/j.tcs.2015.07.051

IF: 1.002

2015-01-01

Theoretical Computer Science

Abstract:A public key trace and revoke scheme combines the functionality of broadcast encryption with the capability of traitor tracing. In Asiacrypt 2003, Kim, Hwang and Lee proposed a public key trace and revoke scheme (referred to as KHL scheme), and gave the security proof to support that their scheme is z-resilient against adaptive chosen-ciphertext attacks, in which the adversary is allowed to adaptively issue decryption queries as well as adaptively corrupt up to z users. In the passed ten years, KHL scheme has been believed as one of the most efficient public key trace and revoke schemes with z-resilience against adaptive chosen-ciphertext attacks under the well-studied DDH assumption. However, in this paper, by giving a concrete attack, we indicate that KHL scheme is actually not secure against adaptive chosen-ciphertexts, even without corruption of any user. We then identify the flaws in the security proof for KHL-scheme, and discuss the consequences of the attack.
Security for Numeric Relational Database Using Traitor Identification: A Survey

Dhanashri Varute,A. Mohanpurkar

Abstract:: The increasing popularity of an internet and its usage has raised the use of digital data at large extent. In this situation, the fundamental need is to provide protection for ownership of data and find out the blameworthy user. This appeals the facilities like content right protection and traitor identification on relational database. To fulfill these features, the fingerprinting schemes should focus on challenges like usability constraint non-violation, minimum distortion, robustness against collusion attack etc. This paper gives a brief overview of fingerprinting schemes which were proposed earlier to address these issues.

Computer Science
ATRC: An Anonymous Traceable and Revocable Credential System using Blockchain for VANETs

Yang Liu,Debiao He,Min Luo,Huaqun Wang,Qin Liu

DOI: https://doi.org/10.1109/tvt.2023.3312547

IF: 6.8

2023-01-01

IEEE Transactions on Vehicular Technology

Abstract:With the number of smart vehicle drivers increasing rapidly, privacy-preserving identity management methods in Vehicular Ad-hoc Networks (VANETs) become more imperative and receive much attention from researchers. Since identity leakage or a single point of failure may result in serious consequences in the VANET, the decentralized anonymous credential (DAC) could be a potential approach to construct a robust network. However, the supervision under decentrilized environment could be a necessary and troublesome in the VANETs. In this paper, we present an anonymous traceable and revocable credential system using blockchain, called ATRC, built over a generalized group signature. The underlying group signature not only meets the anonymity requirement but also makes the users master their identities. What's more, to tackle the privacy leakage in the revocation process, we employ the Merkle tree to construct a whitelist, which trades off the efficiency and the privacy. Finally, we gives the comparison and experiment performance to show our scheme holds lightweight on the user side and has fewer computation costs in the show and revocation phase.

telecommunications,engineering, electrical & electronic,transportation science & technology
Risk Minimization in Traitors Within Traitors in Multimedia Forensics

HV Zhao,KJR Liu

DOI: https://doi.org/10.1109/icip.2005.1530335

2005-01-01

Abstract:In digital fingerprinting and multimedia forensic systems, it is possible that multiple adversaries mount attacks collectively and effectively to undermine the forensic system's traitor tracing capability. During this collusion attack, an important issue that the adversaries need to address is the fairness of attack and ensuring that all colluders share the same risk of being caught. This paper studies the dynamics among attackers in enforcing the fairness of collusion and investigates the problem of traitors within traitors, in which some selfish colluders wish to minimize their own risk while still profiting from collusion. We explore the strategies that these selfish colluders can use to further lower their probability of being detected and analyze their performance. We show that by processing their fingerprinted copies before multi-user collusion, the selfish colluders can further reduce their risk at the cost of quality degradation of their fingerprinted copies.
Multipurpose multilevel multichannel information hiding framework for multimedia protection, authentication and traitor tracing

Zhe-Ming Lu,Zong-Hui Wang,Yong-Liang Liu

DOI: https://doi.org/10.24507/ijicic.17.04.1257

2021-01-01

Abstract:Nowadays, multimedia documents can be easily recreated or modified and then distributed over the Internet or via smart mobile phones; thus copyright protection, copy protection, content authentication and source tracing have become main issues in the big data era. In the past, many multipurpose information hiding schemes have been proposed to solve these problems. However, existing schemes are mainly designed for digital audiovisual documents, but seldom designed for office files, WEB pages, PDF files or software codes. Furthermore, there are few schemes considering how to embed multilevel fingerprints to trace multiple distribution processes. Based on above backgrounds, this paper presents a multipurpose framework based on multilevel multichannel information hiding to provide a more robust and conflict-prevented scheme with whole life cycle and full protection. This framework is developed for all kinds of multimedia documents to protect and/or authenticate and/or trace a multimedia document in its entire life time. In order to make our framework work better as an organic whole, we define a watermark information structure to discriminate and recognize different watermarks and also provide some required control information for watermark extraction or further embedding. To test the effectiveness of the proposed framework, we develop three simulation interfaces for images web pages and PPT files respectively. Experimental results demonstrate that our framework is effective and our scheme can embed multiple watermarks and can extract all watermarks correctly and independently.
Selfish Colluder Detection and Identification in Traitors Within Traitors

H. Vicky Zhao,K. J. Ray Liu

DOI: https://doi.org/10.1109/icip.2006.312832

2006-01-01

Abstract:During collusion attacks against multimedia forensics, an important issue that colluders need to address is the fairness of the attack, i.e., whether all colluders take the same risk of being detected. Although they might agree so, some selfish colluders may break away from their fair-collusion agreement and process their fingerprinted copies before collusion to further lower their risk. On the other hand, to protect their own interests, other attackers may wish to detect and prevent such selfish pre-collusion processing. It is important to study this problem of traitors within traitors, formulate the dynamics among colluders and build a complete model of multi-user collusion. This paper investigates techniques that attackers can use to detect and identify selfish colluders without revealing the secrecy of any fingerprinted copies. Our simulation results show that the proposed scheme accurately identifies all selfish colluders without falsely accusing any others.
Symmetric-Key Based Proofs Of Retrievability Supporting Public Verification

Chaowen Guan,Kui Ren,Fangguo Zhang,Florian Kerschbaum,Jia Yu

DOI: https://doi.org/10.1007/978-3-319-24174-6_11

2015-01-01

Abstract:Proofs-of-Retrievability enables a client to store his data on a cloud server so that he executes an efficient auditing protocol to check that the server possesses all of his data in the future. During an audit, the server must maintain full knowledge of the client's data to pass, even though only a few blocks of the data need to be accessed. Since the first work by Juels and Kaliski, many PoR schemes have been proposed and some of them can support dynamic updates. However, all the existing works that achieve public verifiability are built upon traditional public-key cryptosystems which imposes a relatively high computational burden on low-power clients (e.g., mobile devices).In this work we explore indistinguishability obfuscation for building a Proof-of-Retrievability scheme that provides public verification while the encryption is based on symmetric key primitives. The resulting scheme offers light-weight storing and proving at the expense of longer verification. This could be useful in apations where outsourcing files is usually done by low-power client and verifications can be done by well equipped machines (e.g., a third party server). We also show that the proposed scheme can support dynamic updates. At last, for better assessing our proposed scheme, we give a performance analysis of our scheme and a comparison with several other existing schemes which demonstrates that our scheme achieves better performance on the data owner side and the server side.
ROP Defense Using Trie Graph for System Security.

Alex Yao Chu Zhu,Wei Qi Yan,Roopak Sinha

DOI: https://doi.org/10.4018/ijdcf.20211101.oa7

2021-01-01

International Journal of Digital Crime and Forensics

Abstract:Most Intrusion Detection Systems (IDS) / Intrusion Prevention Systems (IPS) cannot defend the attacks from a Return Oriented Program (ROP) which applies code reusing and exploiting techniques without the need for code injection. Malicious attackers chain a short sequence as a gadget and execute this gadget as an arbitrary (Turing-complete) behavior in the target program. Lots of ROP defense tools have been developed with satisfactory performance and low costs overhead, but malicious attackers can evade ROP tools. Therefore, it needs security researchers to continually improve existing ROP defense tools, because the defense ability of target devices, such as smartphones is weak, and such devices are being increasingly targeted. Our contribution in this paper is to propose an ROP defense method that has provided a better performance of defense against ROP attacks than existing ROP defense tools.
Multi-Issuer Attribute-based Anonymous Credential with Traceability and Revocation

Ye Yang

DOI: https://doi.org/10.5539/cis.v15n2p68

2022-03-17

Computer and Information Science

Abstract:Attribute-based anonymous credential schemes allow users to obtain credentials from the issuer and prove the possession of their attributes interactively and anonymously with service providers. So far, most existing schemes only consider single-issuer, where some of them are extended to be traceable or revocable. In the reality, anonymous credential schemes under multi-issuer are more practical, since users could query for credentials from different issuers and use some of them simultaneously, which is more efficient than showing them individually. Although there are also multi-issuer schemes where users obtain credentials from different issuers and show an aggregated credential to service providers, however, these schemes lack practical properties, for example, revocation of invalid users. In this paper, we propose a multi-issuer attribute-based anonymous credential with traceability and revocation, which provides traceability of invalid users, and revocation of the specific users. Users receive credentials from multiple issuers and show an aggregated credential of selective disclosures of attributes. We provide the security model of our scheme of anonymity and unforgeability. Finally, we discuss the computational complexity, which shows the practicality and efficiency of our scheme.
Secure anonymous communication with conditional traceability

Zhaofeng Ma,Xibin Zhao,Guo Zhi,Gu Ming,Jiaguang Sun

DOI: https://doi.org/10.1007/11577188_58

2005-01-01

Abstract:A new anonymous secure communication protocol with conditional traceability is proposed to provide personal anonymity and privacy protection, in which a secure mapping function is introduced to provide anonymity and personal information protection, when necessary, only authority principal part can act as arbitrator for communication validation. The proposed protocol has 3 advantages: 1) mutual communication; 2) anonymity of communication. 3) conditional traceability.
Autonomous Identification of Selfish Colluders in Traitor-within-Traitor Behavior Forensics

H. Vicky Zhao,K. J. Ray Liu

DOI: https://doi.org/10.1109/icassp.2007.366194

2007-01-01

Abstract:During multi-user collusion attacks against digital fingerprinting, an important issue that colluders have to address is to distribute the risk evenly among all colluders and achieve fairness of the attack. Although they might agree so, some selfish colluders may break their agreement and process their fingerprinted copies before collusion in order to further reduce their own risk. To protect their own interest, other colluders have to detect these selfish colluders and exclude them from multi-user collusion. This paper studies this problem of traitors within traitors. We propose an autonomous selfish colluder detection and identification algorithm, in which colluders help each other detect selfish behavior. We show that the proposed algorithm can correctly identify all selfish colluders without falsely accusing any others, even when a small group of selfish colluders collaborate with each other to change the detection results.
A study on the traceable attribute-based signature scheme provided with anonymous credentials

Yong Woon Hwang,Taehoon Kim,Daehee Seo,Im-Yeong Lee

DOI: https://doi.org/10.1080/09540091.2023.2287979

2024-01-10

Connection Science

Abstract:In order to provide the reliability of transmitted data in the era of big data, it is necessary to communicate by applying signature technology to data. There are various signature schemes, among which attribute-based signatures perform signatures based on user attributes. This ensures signer anonymity by allowing users to create and verify signatures without exposing the signer's sensitive information. However, the verifier can verify normally if the attribute period expires and a user without signing authority creates and transmits a signature with the existing signing key and attributes. In addition, signers who abuse anonymity can disclose their signing keys and attributes for some purpose (Money, profit) because there is no risk of being caught. Unauthorized users can use public information to sign and send messages. Therefore, in this paper, we propose a Traceable Attribute-based Signature scheme provided with anonymous credentials. The proposed scheme has the feature of verifying the validity of the signer by using the pseudonym ID included in the user list in the cloud server. In addition, the signer's identity is expressed as an Oblivious Transfer-based pseudonym ID. The signer's identity can be verified through tracing in case of a problem.

computer science, artificial intelligence, theory & methods
A Novel Electronic Cash System with Trustee-Based Anonymity Revocation from Pairing

Yalin Chen,Jue-Sam Chou,Hung-Min Sun,Ming-Hsun Cho

DOI: https://doi.org/10.1016/j.elerap.2011.06.002

IF: 6

2011-01-01

Electronic Commerce Research and Applications

Abstract:Untraceable electronic cash is an attractive payment tool for electronic-commerce because its anonymity property can ensure the privacy of payers. However, this anonymity property is easily abused by criminals. In this paper, several recent untraceable e-cash systems are examined. Most of these provide identity revealing only when the e-cash is double spent. Only two of these systems can disclose the identity whenever there is a need, and only these two systems can prevent crime. We propose a novel e-cash system based on identity-based bilinear pairing to create an anonymity revocation function. We construct an identity-based blind signature scheme, in which a bank can blindly sign on a message containing a trustee-approved token that includes the user's identity. On demand, the trustee can disclose the identity for e-cash using only one symmetric operation. Our scheme is the first attempt to incorporate mutual authentication and key agreement into e-cash protocols. This allows the proposed system to attain improvement in communication efficiency when compared to previous works.
Traitor-Within-Traitor Behavior Forensics: Strategy and Risk Minimization

H. Vicky Zhao,K. J. Ray Liu

DOI: https://doi.org/10.1109/tifs.2006.885023

IF: 7.231

2006-01-01

IEEE Transactions on Information Forensics and Security

Abstract:Multimedia security systems have many users with different objectives and they influence each other's performance and decisions. Behavior forensics analyzes how users with conflicting interests interact with and respond to each other. Such investigation enables a thorough understanding of multimedia security systems and helps the digital rights enforcer offer stronger protection of multimedia. This paper analyzes the dynamics among attackers during multiuser collusion. The colluders share not only the profit from the redistribution of multimedia but also the risk of being detected by the content owner, and an important issue in collusion is fairness of the attack (i.e., whether all attackers share the same risk) (e.g., whether they have the same probability of being detected)., While they might agree so, some selfish colluders may break their fair-play agreement in order to further lower their risk. This paper investigates the problem of "traitors within traitors" in multimedia forensics, in an effort to formulate the dynamics among attackers and understand their behavior to minimize their own risk and protect their own interests. As the first work on the analysis of this colluder dynamics, this paper explores some possible strategies that a selfish colluder can use to minimize his or her probability of being caught. We show that processing his or her fingerprinted copy before multiuser collusion helps a selfish colluder further lower his or her risk, especially when the colluded copy has high resolution and good quality. This paper also investigates the optimal precollusion processing strategies for selfish colluders to minimize their risk under the quality constraints.
Advanced Software Protection Now

Diego Bendersky,Ariel Futoransky,Luciano Notarfrancesco,Carlos Sarraute,Ariel Waissbein

DOI: https://doi.org/10.48550/arXiv.1006.2356

2010-06-12

Abstract:Software digital rights management is a pressing need for the software development industry which remains, as no practical solutions have been acclamaimed succesful by the industry. We introduce a novel software-protection method, fully implemented with today's technologies, that provides traitor tracing and license enforcement and requires no additional hardware nor inter-connectivity. Our work benefits from the use of secure triggers, a cryptographic primitive that is secure assuming the existence of an ind-cpa secure block cipher. Using our framework, developers may insert license checks and fingerprints, and obfuscate the code using secure triggers. As a result, this rises the cost that software analysis tools have detect and modify protection mechanisms. Thus rising the complexity of cracking this system.

Cryptography and Security
A Secret Sharing Scheme of Dynamic Threshold with Cheaters Detection and Identification

YongZhong He,XueJiao Xu,DaoShun Wang,ShunDong Li,XiangHui Zhao,ChingNung Yang

DOI: https://doi.org/10.1007/978-3-030-16946-6_52

2020-01-01

Abstract:There are many schemes to detect and identify cheaters when the number of participants is exactly equal to t in secret sharing schemes. However, most of them need dealers or redundant information to detect the dishonest participants when participants are greater than threshold t. Harn et al. proposed a dynamic threshold secret reconstruction scheme, which the threshold can be improved to k during reconstruction. Less than k - 1 participants cannot recover the shared secret. Their scheme uses the symmetric polynomial to resist the external adversary. However, each participant needs to hold a polynomial. Thus, the complexity of storage of the scheme is high. Furthermore, the scheme cannot detect and identify the cheaters who present falsified information during secret reconstruction. In this paper, we propose a secret sharing scheme with dynamic threshold k that can identify up to k - 1 dishonest participants who have no legal share information. The scheme does not need the help of the dealer to detect cheaters. The dealer uses the traditional polynomial to distribute a secret to each participant. In the secret reconstruction phase, the share information of each participant is transformed and then presents to other participants who verify it using the public key of the sender. If the presented information is falsified, it will fail the verification and the related participant is identified as a cheater. Otherwise, the secret can be correctly reconstructed. Meanwhile, our scheme ensures that the external adversary who eavesdrops the reconstruction messages cannot recover the secret. The trade-off is that our scheme has additional computation overhead.
Discrete Distributions in the Tardos Scheme, Revisited

Thijs Laarhoven,Benne de Weger

DOI: https://doi.org/10.1145/2482513.2482533

2013-04-29

Abstract:The Tardos scheme is a well-known traitor tracing scheme to protect copyrighted content against collusion attacks. The original scheme contained some suboptimal design choices, such as the score function and the distribution function used for generating the biases. Skoric et al. previously showed that a symbol-symmetric score function leads to shorter codes, while Nuida et al. obtained the optimal distribution functions for arbitrary coalition sizes. Later, Nuida et al. showed that combining these results leads to even shorter codes when the coalition size is small. We extend their analysis to the case of large coalitions and prove that these optimal distributions converge to the arcsine distribution, thus showing that the arcsine distribution is asymptotically optimal in the symmetric Tardos scheme. We also present a new, practical alternative to the discrete distributions of Nuida et al. and give a comparison of the estimated lengths of the fingerprinting codes for each of these distributions.

Cryptography and Security

A Dynamic Revocable Asymmetric Traitor-tracing Scheme

Novel Algorithm of Collusion Secure Fingerprint Coding and Traitor Tracing for Relational Database

Trace and revoke systems with short ciphertexts

A Traitor-Resistant and Dynamic Anonymous Communication Service for Cloud-Based VANETs

A Note on the Security of KHL Scheme

Security for Numeric Relational Database Using Traitor Identification: A Survey

ATRC: An Anonymous Traceable and Revocable Credential System using Blockchain for VANETs

Risk Minimization in Traitors Within Traitors in Multimedia Forensics

Multipurpose multilevel multichannel information hiding framework for multimedia protection, authentication and traitor tracing

Selfish Colluder Detection and Identification in Traitors Within Traitors

Symmetric-Key Based Proofs Of Retrievability Supporting Public Verification

ROP Defense Using Trie Graph for System Security.

Multi-Issuer Attribute-based Anonymous Credential with Traceability and Revocation

Secure anonymous communication with conditional traceability

Autonomous Identification of Selfish Colluders in Traitor-within-Traitor Behavior Forensics

A study on the traceable attribute-based signature scheme provided with anonymous credentials

A Novel Electronic Cash System with Trustee-Based Anonymity Revocation from Pairing

Traitor-Within-Traitor Behavior Forensics: Strategy and Risk Minimization

Advanced Software Protection Now

A Secret Sharing Scheme of Dynamic Threshold with Cheaters Detection and Identification

Discrete Distributions in the Tardos Scheme, Revisited