<link rel="stylesheet" href="styles.cf390c6bfbe7555f.css"> Skip to main content

學術出版;;Publications

Permanent URI for this communityhdl:11536/1

收集所有交通大學研究人員與學生個人或團體所發表之各項學術著作,涵蓋期刊論文、教師專書、學位論文等項。;;Collections of Publications of NCTU Researchers and Students Like Journal Papers and Thesis.

Browse

Search Results

Now showing 1 - 3 of 3
  • Item type:Item,
    A trustworthy Internet auction model with verifiable fairness
    (2001)
    Liao, GY
    ;
    Hwang, JJ
    ;
    資訊管理與財務金融系 註:原資管所+財金所
    ;
    Department of Information Management and Finance
    Describes a novel Internet auction model achieving verifiable fairness, a requirement aimed at enhancing the trust of bidders in auctioneers. Distrust in remote auctioneers prevents bidders from participating in Internet auctioning. According to proposed survey reports, this study presents four characteristics that render the Internet untrustworthy for bidders. These intrinsic properties suggest that auction sites not only follow auction policies, but provide customers with evidence validating that the policies are applied fairly. Evidence of verifiable fairness provides bidders with a basis for confidence in Internet auctions. Cryptographic techniques are also applied herein to establish a novel auction model with evidence to manifest and verify every step of the auctioneer. Analysis results demonstrate that the proposed model satisfies various requirements regarding fairness and privacy. Moreover, in the proposed model, the losing bids remain sealed.
  • Item type:Item,
    Securing on-line credit card payments without disclosing privacy information
    (2003-05-01)
    Hwang, JJ
    ;
    Yeh, TC
    ;
    Li, JB
    ;
    資訊管理與財務金融系 註:原資管所+財金所
    ;
    Department of Information Management and Finance
    Two revisions of the original Secure Electronic Transaction (SET) protocol are proposed to conceal cardholders' identities in the electronic marketplace in which cardholders' trust for banks can be reduced to a minimum. Constrained by being extensions of the existing card payment networks to the Internet, most on-line credit card payment schemes in use or proposed in recent papers assume the sensitive card information could be disclosed to all the participating banks. The assumption used to work well in traditional credit card payments before. However, negative impacts such as banking scandals, closure programs due to poor management, and security problems with Internet banking are all undermining cardholders' trust in banks. The issuer is the trusted bank selected by the cardholder, but the acquirer is not. To reveal the cardholder's sensitive card information to every possible acquirer implies potential risk. Based on the need-to-know principle, the two revisions are proposed to relax the assumption mentioned above. In our solutions, the sensitive card information is well protected along the way and can be extracted only by the issuer. A cardholder needs only to select a trustworthy issuer, instead of worrying about the possible breakdowns of every involved acquirer. The cost to achieve our more. secure schemes demands only minor information modifications on the legacy system. (C) 2002 Elsevier Science B.V. All rights reserved.
  • Item type:Item,
    Greater protection for credit card holders: a revised SET protocol
    (1998-01-01)
    Hwang, JJ
    ;
    Hsueh, SC
    ;
    資訊管理與財務金融系 註:原資管所+財金所
    ;
    Department of Information Management and Finance
    MasterCard International and VISA International recently proposed the Secure Electronic Transaction (SET) protocol. Constrained by being an extension of the existing card payment networks to the Internet, SET does not satisfy the concern about privacy infringement, in particular, caused by data aggregation. This paper revises SET, guided by the principle of information segregation and hiding. The revision allows cardholders to take part in account reporting, and offers them a credit card surrogate to conceal their credit card identification in the electronic marketplace. The result is a successful counter to privacy infringement in both the small scope of a transaction and the much broader scope of data aggregation. (C) 1998 Published by Elsevier Science Ltd.