Information Security: Second International Workshop, ISW'99, Kuala Lumpur, Malaysia, November 6-7, 1999 Proceedings (Lecture Notes in Computer Science, 1729)

The 1999 International Information Security Workshop, ISW'99, was held on Monash University's Malaysia Campus, which is about 20km to the south west of downtown Kuala Lumpur, November 6-7, 1999. ISW'99soughtadi erentgoalfromitspredecessor, ISW'97, heldinIshikawa, Japan, whose proceedings were published as Volume 1396 of Springer Verlag's LNCS series. The focus of ISW'99 wason the following emerging areasof imp- tance in information security: multimedia watermarking, electronic cash, secure software components and mobile agents, and protection of software. Theprogramcommitteereceived38fullsubmissionsfrom12countriesand- gions: Australia, China, France, Germany, Hong Kong, Japan, Korea, Malaysia, Singapore, Spain, Taiwan, and USA, and selected 23 of them for presentation. Among the 23 presentations, 19 were regular talks and the remaining 4 were short talks. Each submission was reviewed by at least two expert referees. We are grateful to the members of the program committee for reviewing and selecting papers in a very short period of time. Their comments helped the authors improve the n al version of their papers. Our thanks also go to Patrick McDaniel, Masaji Kawahara, and Yasuhiro Ohtaki who assisted in reviewing papers. In addition, we would like to thank all the authors, including those whose submissions were not accepted, for their contribution to the success of this workshop. The workshop was organized with the help of local committee members, - cluding Cheang Kok Soon, Hiew Pang Leang, Lily Leong, and Robin Pollard. Information Security Preface Information Security Workshop Organizing Committee Program Committee Contents Spending Programs: A Tool for Flexible Micropayments* Introduction Our Result Plan of This Paper Background on Hash-Based Micropayments Basic Construction Non-iterative Spending Programs Iterative Spending Programs Conclusion Money Conservation via Atomicity in Fair Off-Line E-Cash Introduction The Problem Our Solution Outline Related Work E-Cash Schemes Previous Approaches to Atomic E-Commerce Transactions Preliminary Basic Ideas Assumptions Atomicity Extension to [FTY96, T97, CFT98] E-Cash Scheme The Extended Payment-Delivery Protocol The Solution Claims Atomicity Extension to [JY96, J97] E-Cash Scheme The Extended Payment-Delivery Protocol The Solution Claims Conclusion Engineering an eCash System Engineering an eCash System Introduction Engineering Practical eCash Systems to Replace Cash Engineering and the Marketplace Conclusion Unlinkable Electronic Coupon Protocol with Anonymity Control Introduction Requirements for Electronic Coupon Protocols Electronic Coupon Protocol Preliminaries Protocol Discussion Conclusion On the Security of the Lee-Chang Group Signature Scheme and Its Derivatives Group Signatures Lee-Chang Group Signature Unlinkability Tseng-Jan Improved Group Signature Cryptanalysis Lee-Chang Signature Tseng-Jan Signature Universal Forgeries Security Properties of Software Components Motivation Classes of Component Security Properties An Example Identifying Security Properties Observations Summary and Further Work Methods for Protecting a Mobile Agent's Route Introduction Related Work Framework Protecting the Initial Route Atomic Encryptions and Signatures Atomic Encryptions, Nested Signatures Nested Encryptions, Atomic Signatures Nested Encryptions and Signatures Summary Extending the Initial Route Unreachable Working Contexts Conclusions Future Work Non-interactive Cryptosystem for Entity Authentication 1 Introduction 2 Non-interactive Protocols 3 Non-interactive Entity Authentication 4 Applications of Proposed Non-interactive Schemes 5 Security and Performance Evaluations 6 Conclusions References Implementation of Virtual Private Networks at the Transport Layer Introduction Overview of VPN Solutions in the TCP/IP Stack Layers Outline of the New Scheme Secsockets Design and Operation Functions of the Interface Secsockets VPN-Insel Design and Operation Operation Example and Implementation Issues Conclusions Performance Evaluation of Certificate Revocation Using k-Valued Hash Tree Introduction Preliminary PKI Model Certificate Revocation List (CRL) Online Certificate Status Protocol (OCSP) Certificate Revocation Tree (CRT) CRT Update Random Insertion Balancing Update The Update Problem of CRT When Expired Certificate Should Be Deleted from CRT The Comparison between the Balanced Tree and Randomly Built Tree $k$-Valued Hash Tree Communication Cost The Processing Time to Compute Partial Trees The Optimal Value of $k$ for Both the Processing Time and the Communication Cost Conclusion Active Rebooting Method for Proactivized System: How to Enhance the Security against Latent Virus Attacks* Introduction Latent Virus Attack to Proactive System Our Results Organization Preliminaries Definition The Model of Virus Infection and Detection Latent Virus Attack Analysis Robustness against Latent Virus Attacks (Threshold Protocol without Proactive Maintenance) Robustness against Latent Virus Attacks (Proactive Protocol) Active Rebooting Conclusions Highly Robust Image Watermarking Using Complementary Modulations Introduction Watermark Modulation Random Modulation Complementary Modulations The Proposed Watermarking Algorithm Wavelet Coefficients Selection Watermark Hiding Watermark Detection Performace Analysis Experimental Results Conclusion Region-Based Watermarking for Images 1. Introduction 2. Segmentation in Watermarking 2.1 The System 2. 2 Producing Invariance in Segments 3. Feature-Based Segmentation 4. Experimental Results 4.1 Region Growing 4.2 K-Means 4.3 Sorting 5. Conclusion Acknowledgments: References: Digital Watermarking Robust Against JPEG Compression Introduction Digital Watermarking Method Digital Watermarking Using Difference Preprocessing Construction of a Watermark Simulation Results Conclusion Fingerprints for Copyright Software Protection Introduction Motivation Software Copyright Protection Software Watermarking Identity of Software Group Software Identity Software Identity Resilient against Partial Destruction Security Requirements for Software Protection Nested Fingerprinting Identity and Mutable Instructions The Scheme Implementation Considerations Behavioural Fingerprinting Dynamic Identity The Scheme Conclusions A Secrecy Scheme for MPEG Video Data Using the Joint of Compression and Encryption Introduction The Principle of MPEG The Structure of MPEG-1 Video The MPEG-1 Video Compression Related Works The Combination of the MPEG Compression with the Selective Encryption The Result and the Analysis of Simulation Simulation Environment Analysis of the Result MPEG Video Authentication Conclusions On Anonymous Electronic Cash and Crime Introduction Weaknesses in Escrowed Cash Systems An Alternative Approach Conclusions On the Diculty of Key Recovery Systems Introduction Related Work Attacks when Encrypting a Message in Transit Enrollment Attacks against the Key Recovery Agent Attacks against Authorized Access Another Approach and Attacks Against It: Message Recovery System Problem 1 -- Mao's VES Is Not Shadow Public-Key Resistant Mao's Verifiable Escrowed Signature Scheme Shadow Public-Key Problem and Failsafe Off-Line Key Escrow Problem 2 -- Subliminal Communication Is Easy Using Dawson's Software Key Escrow Abuse of Dawson's Software Key Escrow Encryption Scheme Vendors' Abuse to Leak Customer's Private-Keys Problem 3 -- Lee's Key Escrow System Is Vulnerable to the LEAF Attack and the Squeezing Attack Problem 4 -- Horster's Key Escrow System with Active Investigator Does Not Have Time-Boundness Problem 5 -- Securing Your Bins Problem 6 -- Subliminal Channel in Proxy Signatures Conclusions An Improvement on a Practical Secret Voting Scheme Introduction Model and Notations Model Notations The FOO92 Scheme and Its Implementations The FOO92 Scheme Example 1: Sensus Example 2: E-Vox Proposed Voting Scheme Extension Conclusion Undeniable Confirmer Signature Introduction A Model of Undeniable Confirmer Signature Preliminaries Notation Schnorr Signature Scheme Chaum-Petersen Signature of Equality of Discrete Logarithms Fujioka-Okamoto-Ohta Interactive Bi-proof of Equality The Construction Intuition Explained Security Analysis Signature Unforgeability: Blind Undeniable Confirmer Signature and Its Application Construction A Scalable Subscription Payment Scheme Extended Proxy Signatures for Smart Cards Introduction Previous Work Basic Idea and Classification of Problems Nyberg-Ruppel-Based Proxy Signature Scheme Proposed Scheme 1 Security Considerations (Proposed Scheme 1) RSA-Based Proxy Signature Scheme Proposed Scheme 2 Security Considerations (Proposed Scheme 2) Concluding Remarks A New Digital Signature Scheme on ID-Based Key-Sharing Infrastructures* Introduction Brief Review of KPS Property of KPS Conventional Digital Signature Scheme A Basic Scheme of the KPS New Digital Signature Scheme Examples Example 1: ID-Type Example 2: Random-Type Security and Performance Summary Cryptanalysis of Two Group Signature Schemes Introduction Tseng-Jan Group Signature Schemes ID-Based Signature Self-Certified Public Keys Based Signature Cryptanalysis On the Security of the ID-Based Scheme On the Security of the Self-Certified Public Keys Based Scheme Conclusions Author Index This book constitutes the refereed proceedings of the Second International Information Security Workshop, ISW'99, held in Kuala Lumpur, Malaysia in November 1999. The 23 revised full papers presented were carefully reviewed and selected from 38 submissions. The book is divided in topical sections on electronic money; electronic payment and unlinkability; secure software components, mobile agents, and authentication; network security; digital watermarking; protection of software and data; key recovery and electronic voting; and digital signatures