Financial cryptography and data security : 11th international conference, FC 2007, and 1st International Workshop on Usable Security, USEC 2007, Scarborough, Trinidad and Tobago, February 12-16, 2007 : revised selected papers

The 11th International Conference on Financial Cryptography and Data Security (FC 2007, http://fc07. ifca. ai), organized by the International Financial Crypt- raphy Association (IFCA, http://www. ifca. ai/), was held in Tobago, February 12–15, 2007. The conference is a well-established and premier international - rum for research, advanced development, education, exploration, and debate - garding security in the context of ?nance and commerce. We continue to cover all aspects of securing transactions and systems, which this year included a range of technical areas such as cryptography, payment systems, anonymity, privacy, - thentication, and commercial and ?nancial transactions. For the ?rst time, there was an adjacent workshop on Usable Security, held after FC 2007 in the same - cation. The papers are included in the last part of this volume. The conference goal was to bring together top cryptographers, data-security specialists, and c- puter scientists with economists, bankers, implementers, and policy makers. The goal was met this year: there were 85 submissions, out of which 17 research papers and 1 system presentation paper were accepted. In addition, the conference featured two distinguished speakers, Mike Bond and Dawn Jutla, and two panel sessions, one on RFID and one on virtual economies. As always, there was the rump session on Tuesday evening, colorful as usual. Front Matter....Pages - Leaving Room for the Bad Guys....Pages 1-1 Vulnerabilities in First-Generation RFID-enabled Credit Cards....Pages 2-14 Conditional E-Cash....Pages 15-28 A Privacy-Protecting Multi-Coupon Scheme with Stronger Protection Against Splitting....Pages 29-44 Panel: RFID Security and Privacy....Pages 45-45 Position Statement in RFID S&P Panel: RFID and the Middleman....Pages 46-49 Position Statement in RFID S&P Panel: Contactless Smart Cards....Pages 50-52 Position Statement in RFID S&P Panel: From Relative Security to Perceived Secure....Pages 53-56 A Model of Onion Routing with Provable Anonymity....Pages 57-71 K -Anonymous Multi-party Secret Handshakes....Pages 72-87 Using a Personal Device to Strengthen Password Authentication from an Untrusted Computer....Pages 88-103 Scalable Authenticated Tree Based Group Key Exchange for Ad-Hoc Groups....Pages 104-118 On Authentication with HMAC and Non-random Properties....Pages 119-133 Hidden Identity-Based Signatures....Pages 134-147 Space-Efficient Private Search with Applications to Rateless Codes....Pages 148-162 Cryptographic Securities Exchanges....Pages 163-178 Improved Multi-party Contract Signing....Pages 179-191 Informant: Detecting Sybils Using Incentives....Pages 192-207 Dynamic Virtual Credit Card Numbers....Pages 208-223 The Unbearable Lightness of PIN Cracking....Pages 224-238 Virtual Economies: Threats and Risks....Pages 239-244 Usable SPACE: Security, Privacy, and Context for the Mobile User....Pages 245-245 Personal Digital Rights Management for Mobile Cellular Devices....Pages 246-246 Certificate Revocation Using Fine Grained Certificate Space Partitioning....Pages 247-259 An Efficient Aggregate Shuffle Argument Scheme....Pages 260-274 Front Matter....Pages 275-275 Preface....Pages 277-279 An Evaluation of Extended Validation and Picture-in-Picture Phishing Attacks....Pages 281-293 WSKE: Web Server Key Enabled Cookies....Pages 294-306 Usability Analysis of Secure Pairing Methods....Pages 307-324 Low-Cost Manufacturing, Usability, and Security: An Analysis of Bluetooth Simple Pairing and Wi-Fi Protected Setup....Pages 325-340 Empirical Studies on Software Notices to Inform Policy Makers and Usability Designers....Pages 341-355 What Instills Trust? A Qualitative Study of Phishing....Pages 356-361 Phishing IQ Tests Measure Fear, Not Ability....Pages 362-366 Mental Models of Security Risks....Pages 367-377 Improving Usability by Adding Security to Video Conferencing Systems....Pages 378-382 A Sense of Security in Pervasive Computing—Is the Light on When the Refrigerator Door Is Closed?....Pages 383-388 Back Matter....Pages - This book constitutes the thoroughly refereed proceedings of the 11th International Conference on Financial Cryptography and Data Security, FC 2007, and the co-located 1st International Workshop on Usable Security, USEC 2007, both held in Scarborough, Trinidad/Tobago, in February 2007. The book includes 17 revised full papers, 1 system presentation paper and the transcriptions of 5 panel sessions from FC 2007. The papers, which were carefully reviewed and selected from 85 submissions, are organized in topical sections on Payment Systems, Anonymity, Authentication, Anonymity and Privacy, Cryptography and Commercial Transactions, Financial Transactions and Web Services, and Cryptography. The book concludes with 5 revised full and 5 revised short papers from the USEC 2007 workshop. This workshop brought together an interdisciplinary group of researchers and practitioners to discuss usability problems and deepen the understanding of users' capabilities and motivations in performing security tasks There Are Few More Important Areas Of Current Research Than This, And Here, Springer Has Published A Double Helping Of The Latest Work In The Field. That’s Because The Book Contains The Thoroughly Refereed Proceedings Of The 11th International Conference On Financial Cryptography And Data Security, And The Co-located 1st International Workshop On Usable Security, Both Held In Trinidad/tobago In February 2007. Topics Covered Include Payment Systems And Authentication.