Browsing by Author "Shao, MH"

Now showing 1 - 2 of 2

A transactional-cycle approach to evidence management for dispute resolution
(2005-05-01)
Shao, MH
;
Hwang, JJ
;
Wu, SS
;
資訊管理與財務金融系註：原資管所+財金所
;
Department of Information Management and Finance
Dispute resolution, a necessary function in electronic commerce, must rely on evidence that includes mechanisms to ensure non-repudiation of actions by the participants. In open systems comprising computer networks, this "non-repudiation service" is one type of security service defined in the ISO/IEC standards. These, as well as other literature, have defined a system framework for such a service. Evidence management is the central part. We propose a new methodology for evidence management with a model using a transactional cycle in which evidence is collected in compliance with the legal concept of chain-of-evidence. Evidence then exists as a set of relevant pieces instead of an atomic item. A case study involving credit-cardover-SSL transactions was used to demonstrate how the model works. Our aim was to present a new approach and show that evidence accountability can be better ensured. © 2004 Elsevier B.V. All rights reserved.
On the security of a certified e-mail scheme with temporal authentication
(2005)
Shao, MH
;
Zhou, JY
;
Wang, GL
;
資訊管理與財務金融系註：原資管所+財金所
;
Department of Information Management and Finance
Certified e-mail is a value-added service for standard e-mail systems, in which the intended recipient gets the mail content if and only if the mail originator receives a non-repudiation evidence that the message has been received by the recipient. As far as security is concerned, fairness is one of the most important requirements. Recently, Galdi and Giordano (2004) presented an optimistic protocol for certified e-mail with temporal authentication. In this paper, we analyze their protocol and demonstrate that it cannot achieve true fairness and has some other weaknesses. We further propose the improvements to avoid those security problems.