Financial Cryptography: 4th International Conference, FC 2000 Anguilla, British West Indies, February 20-24, 2000 Proceedings (Lecture Notes in Computer Science, 1962)

Financial Cryptography 2000 marked the fourth time the technical, business, legal, and political communities from around the world joined together on the smallislandofAnguilla,BritishWestIndiestodiscussanddiscovernewadvances in securing electronic ?nancial transactions. The conference, sponsored by the International Financial Cryptography Association, was held on February 20– 24, 2000. The General Chair, Don Beaver, oversaw the local organization and registration. The program committee considered 68 submissions of which 21 papers were accepted. Each submitted paper was reviewed by a minimum of three referees. These proceedings contain revised versions of the 21 accepted papers. Revisions were not checked and the authors bear full responsibility for the content of their papers. This year’s program also included two invited lectures, two panel sessions, and a rump session. The invited talks were given by Kevin McCurley prese- ing “In the Search of the Killer App” and Pam Samuelson presenting “Towards a More Sensible Way of Regulating the Circumvention of Technical Protection Systems”. For the panel sessions, Barbara Fox and Brian LaMacchia mod- ated “Public-Key Infrastructure: PKIX, Signed XML, or Something Else” and Moti Yung moderated “Payment Systems: The Next Generation”. Stuart Haber organized the informal rump session of short presentations. This was the ?rst year that the conference accepted submissions electro- cally as well as by postal mail. Many thanks to George Davida, the electronic submissions chair, for maintaining the electronic submissions server. A majority of the authors preferred electronic submissions with 65 of the 68 submissions provided electronically. Lecture Notes in Computer Science Springer Financial Cryptography Copyright page Preface Financial Cryptography 2000 Table of Contents Digital Rights Management Efficient Trace and Revoke Schemes 1 Introduction 2 Revocation Schemes 3 Schemes that Combine Revocation with Self Enforcement and Tracing Acknowledgments References Efficient Watermark Detection and CollusionSecurity 1 Introduction 2 Media Watermarking 3 Modified Scheme 4 Lower Bounds 5 Conclusion References Invited Lecture (I) Towards More Sensible Anti-circumvention Regulations I. Introduction II. Origins of Anti-circumvention Regulations III. The DMCA's Anti-circumvention Regulations IV. Problems with the DMCA Anti-circumvention Provisions V. Conclusion Acknowledgement References Payment Systems Self-Escrowed Cash against User Blackmailing 1 Introduction 2 Anonymous Electronic Cash Systems 3 User Blackmailing and Previous Solutions 4 Achieving Self-Escrowed Cash against User Blackmailing 5 Security Issues 6 Conclusion Acknowledgments References Blind, Auditable Membership Proofs 1 Introduction 2 Blind, Auditable Membership Proofs 3 Tools 4 A provably Secure Accumlator Construction 5 A Protocol for Blind, Auditable Membership Proofs 6 An Efficient Off-Line Ecash System 7 Acknowledgments References A Proof of Lemma 1. Private Selective Payment Protocols 1 Introduction 2 Preliminaries 3 Private Selective Payment Protocol: Definition 4 Preliminary Oblivious Transfer Protocols 5 The Private Selective Payment Protocol Acknowledgements References Financial Cryptography Tools (I) Sharing Decryption in the Context of Voting or Lotteries 1 Introduction 2 Definition and Security of Threshold Cryptosystem 3 Preliminary Tools 4 Threshold Version of RSA Cryptosystem 5 Threshold Version of Paillier Cryptosystem 6 Conclusion References Electronic Postcards Postal Revenue Collection in the Digital Age 1 Background and Introduction 2 Fundamentals 3 Requirements 4 Optimal Mail Certificates 5 Cryptographic Validation Code as a Digital Signature with Partial Message Recovery 6 Discussion and Conclusion References Signing on a Postcard 1 Introduction 2 The Random Oracle Model 3 The Partial Recovery Scheme 4 Bandwidth Optimizations 5 Conclusion 6 Acknowledgments References Panel (I) Payment Systems: The Next Generation Acknowledgments: Abuses of Systems Non-repudiation in SET: Open Issues 1 Introduction 2 High-Level Payment Protocol Description 3 Proving Authorizations of Primitive Transactions 4 SET 5 iKP 6 Summary References Statistics and Secret Leakage 1 Introduction 2 What Can We Ideally Expect? 3 What Can We Practically Hope to Achieve? 4 What Can We (Typically) Get for a Reasonable Price? 5 Acknowledgements References Appendix: The Difference of Means Test Analysis of Abuse-Free Contract Signing 1 Introduction 2 Background 3 Abuse-Free Optimistic Contract Signing Protocol 4 Analysis 5 Repairing the Protocol 6 Conclusions References Asymmetric Currency Rounding 1 Introduction 2 Currency Conversion 3 Rounding Attacks 4 Probabilistic Rounding 5 An Asymmetric Solution 6 Conclusion 7 Acknowledgments and Further References References Appendix A: Euro Exchange Rates Appendix B: EC Regulation 1103/97 Financial Crypto Policies and Issues The Encryption Debate in Plaintext: National Security and Encryption in the United States and Israel 1 Introduction 2 US Encryption Policy 3 January 14, 2000 US Policy Reforms 4 Israel's Security and Economic Concerns 5 Israel's Encryption Policy 6 Conclusion Critical Comments on the European Directive on a Common Framework for Electronic Signatures and Certification Service Providers 1 Security in Electronic Transactions and the European Parliamentand Council Directive on Electronic Signatures 2 Electronic Signatures, Certificates and Certification Authorities 3 Legal Effects of Electronic Signatures 4 Providers of Certification Services 5 Conclusions References A Response to "Can We Eliminate Certificate Revocation Lists?" 1 Introduction 2 Certificate Revocation Lists 3 PKI Analysis 4 Short Term Certificates 5 Conclusions 6 Acknowledgements References Anonymity Self-Scrambling Anonymizers 1 Introduction 2 Some Building Blocks 3 Security Model 4 Intuition 5 A Practical Example 6 A Complete Description: An Electronic Cash Scheme 7 Conclusion 8 Acknowledgmen ts References Authentic Attributes with Fine-Grained Anonymity Protection 1 Introduction 2 High LeveI Overview 3 Background and Related Work 4 System Assumptions 5 GUP Protocols 6 Global Pseudonymous Attributes 7 Global Anonymous Attributes 8 Security Properties, Security Goals, and Trust Assumptions 9 Conclusion References Resource-Efficient Anonymous Group Identification 1 Introduction 2 Related Work 3 Description of Basic Protocol 4 Extensions to Homage 5 Analysis of Anonymity and Unforgeability 6 Implementing the Homage Protocol 7 Conclusion References A Zero-Knowledge Proofs Financial Cryptography Tools (II) Secret Key Authentication with Software-Only Verification 1 Introduction 2 Case: The Smart Card 3 Protocol Requirements and the Threat Model 4 Using Diversified Keys for Authentication 5 Using a One-Time Password Scheme for Authentication 6 Applications 7 Conclusions & Further Research References Panel (II) Panel: Public Key Infrastructure: PKIX, Signed XML or Something Else? 1. Background 2. PKI Options: PKIX and Signed XML References System Architectures Financial Cryptography in 7 Layers Introduction The 7 Layer Model An Example - The Ricardo System Concluding Remarks References Capability-Based Financial Instruments 1 Overview 2 From Functions to Objects 3 From Objects to Capabilities 4 Capabilities As A Cryptographic Protocol 5 From Capabilities to Financial Instruments 6 Composable Security, Readable Contracts Acknowledgements References Author Index

This book constitutes the thoroughly refereed post-proceedings of the 4th International Conference on Financial Cryptography, FC 2000, held in Anguilla, British West Indies, in February 2000.
The 21 revised full papers presented together with two invited papers and two tool summaries were carefully reviewed and selected from 68 submissions. The papers are organized in topical sections on digitial rights management, payment systems, finanical cryptography tools, electronic postcards, abusers of systems, financial cryptopolicies and issues, anonymity, and systems architecture.