Cryptanalysis of two anonymous buyer-seller watermarking protocols and an improvement for true anonymity

Bok Min Goi; Raphael C.W. Phan; Yanjiang Yang; Feng Bao; Robert H. Deng; M. U. Siddiqi

doi:10.1007/978-3-540-24852-1_27

Cryptanalysis of two anonymous buyer-seller watermarking protocols and an improvement for true anonymity

Bok Min Goi, Raphael C.W. Phan, Yanjiang Yang, Feng Bao, Robert H. Deng, M. U. Siddiqi

Research output: Chapter in Book/Report/Conference proceeding › Conference Paper › Research › peer-review

34 Citations (Scopus)

Abstract

By combining techniques of watermarking and fingerprinting, a sound buyer-seller watermarking protocol can address the issue of copyright protection in e-commerce. In this paper, we analyze the security of two recent anonymous buyer-seller watermarking protocols proposed by Ju et. al and Choi et. al respectively, and prove that they do not provide the features and security as claimed. In particular, we show that i) the commutative cryptosystem used in Choi et. al's protocol fails to prevent the watermark certification authority (WCA) from discovering the watermark (fingerprint) chosen by the buyer; ii) for both protocols, the seller can discover the watermark chosen by the buyer if he colludes with the WCA. Hence, these protocols cannot guard against conspiracy attacks. We further show that these protocols only provide "partial" anonymity, ie. the buyer's anonymity is guaranteed only if WCA is honest. Our results suggest that the security of these protocols must assume the honesty of WCA, contrary to the designers' original claim. Finally, we propose a new anonymous buyer-seller watermarking protocol which is more secure and efficient, and provides true anonymity.

Original language	English
Title of host publication	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Editors	Markus Jakobsson, Moti Yung, Jianying Zhou
Publisher	Springer
Pages	369-382
Number of pages	14
ISBN (Print)	3540222170, 9783540222170
DOIs	https://doi.org/10.1007/978-3-540-24852-1_27
Publication status	Published - 2004
Externally published	Yes
Event	International Conference on Applied Cryptography and Network Security 2004 - Yellow Mountain, China Duration: 8 Jun 2004 → 11 Jun 2004 Conference number: 2nd https://link.springer.com/book/10.1007/b98360 (Proceedings)

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	3089
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	International Conference on Applied Cryptography and Network Security 2004
Abbreviated title	ACNS 2004
Country/Territory	China
City	Yellow Mountain
Period	8/06/04 → 11/06/04
Internet address	https://link.springer.com/book/10.1007/b98360 (Proceedings)

Keywords

Anonymity
Copyright Protection
Fingerprinting
Traitor Tracing
Watermarking

Access to Document

10.1007/978-3-540-24852-1_27

Cite this

Goi, B. M., Phan, R. C. W., Yang, Y., Bao, F., Deng, R. H., & Siddiqi, M. U. (2004). Cryptanalysis of two anonymous buyer-seller watermarking protocols and an improvement for true anonymity. In M. Jakobsson, M. Yung, & J. Zhou (Eds.), Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) (pp. 369-382). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 3089). Springer. https://doi.org/10.1007/978-3-540-24852-1_27

Goi, Bok Min ; Phan, Raphael C.W. ; Yang, Yanjiang et al. / Cryptanalysis of two anonymous buyer-seller watermarking protocols and an improvement for true anonymity. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics). editor / Markus Jakobsson ; Moti Yung ; Jianying Zhou. Springer, 2004. pp. 369-382 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{50fa9bfa47e04ed4a15c3e733aabb4bc,

title = "Cryptanalysis of two anonymous buyer-seller watermarking protocols and an improvement for true anonymity",

abstract = "By combining techniques of watermarking and fingerprinting, a sound buyer-seller watermarking protocol can address the issue of copyright protection in e-commerce. In this paper, we analyze the security of two recent anonymous buyer-seller watermarking protocols proposed by Ju et. al and Choi et. al respectively, and prove that they do not provide the features and security as claimed. In particular, we show that i) the commutative cryptosystem used in Choi et. al's protocol fails to prevent the watermark certification authority (WCA) from discovering the watermark (fingerprint) chosen by the buyer; ii) for both protocols, the seller can discover the watermark chosen by the buyer if he colludes with the WCA. Hence, these protocols cannot guard against conspiracy attacks. We further show that these protocols only provide {"}partial{"} anonymity, ie. the buyer's anonymity is guaranteed only if WCA is honest. Our results suggest that the security of these protocols must assume the honesty of WCA, contrary to the designers' original claim. Finally, we propose a new anonymous buyer-seller watermarking protocol which is more secure and efficient, and provides true anonymity.",

keywords = "Anonymity, Copyright Protection, Fingerprinting, Traitor Tracing, Watermarking",

author = "Goi, {Bok Min} and Phan, {Raphael C.W.} and Yanjiang Yang and Feng Bao and Deng, {Robert H.} and Siddiqi, {M. U.}",

note = "Copyright: Copyright 2020 Elsevier B.V., All rights reserved.; International Conference on Applied Cryptography and Network Security 2004, ACNS 2004 ; Conference date: 08-06-2004 Through 11-06-2004",

year = "2004",

doi = "10.1007/978-3-540-24852-1_27",

language = "English",

isbn = "3540222170",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "Springer",

pages = "369--382",

editor = "Markus Jakobsson and Moti Yung and Jianying Zhou",

booktitle = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

url = "https://link.springer.com/book/10.1007/b98360",

}

Goi, BM, Phan, RCW, Yang, Y, Bao, F, Deng, RH & Siddiqi, MU 2004, Cryptanalysis of two anonymous buyer-seller watermarking protocols and an improvement for true anonymity. in M Jakobsson, M Yung & J Zhou (eds), Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics). Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 3089, Springer, pp. 369-382, International Conference on Applied Cryptography and Network Security 2004, Yellow Mountain, China, 8/06/04. https://doi.org/10.1007/978-3-540-24852-1_27

Cryptanalysis of two anonymous buyer-seller watermarking protocols and an improvement for true anonymity. / Goi, Bok Min; Phan, Raphael C.W.; Yang, Yanjiang et al.
Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics). ed. / Markus Jakobsson; Moti Yung; Jianying Zhou. Springer, 2004. p. 369-382 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 3089).

Research output: Chapter in Book/Report/Conference proceeding › Conference Paper › Research › peer-review

TY - GEN

T1 - Cryptanalysis of two anonymous buyer-seller watermarking protocols and an improvement for true anonymity

AU - Goi, Bok Min

AU - Phan, Raphael C.W.

AU - Yang, Yanjiang

AU - Bao, Feng

AU - Deng, Robert H.

AU - Siddiqi, M. U.

N1 - Conference code: 2nd

PY - 2004

Y1 - 2004

N2 - By combining techniques of watermarking and fingerprinting, a sound buyer-seller watermarking protocol can address the issue of copyright protection in e-commerce. In this paper, we analyze the security of two recent anonymous buyer-seller watermarking protocols proposed by Ju et. al and Choi et. al respectively, and prove that they do not provide the features and security as claimed. In particular, we show that i) the commutative cryptosystem used in Choi et. al's protocol fails to prevent the watermark certification authority (WCA) from discovering the watermark (fingerprint) chosen by the buyer; ii) for both protocols, the seller can discover the watermark chosen by the buyer if he colludes with the WCA. Hence, these protocols cannot guard against conspiracy attacks. We further show that these protocols only provide "partial" anonymity, ie. the buyer's anonymity is guaranteed only if WCA is honest. Our results suggest that the security of these protocols must assume the honesty of WCA, contrary to the designers' original claim. Finally, we propose a new anonymous buyer-seller watermarking protocol which is more secure and efficient, and provides true anonymity.

AB - By combining techniques of watermarking and fingerprinting, a sound buyer-seller watermarking protocol can address the issue of copyright protection in e-commerce. In this paper, we analyze the security of two recent anonymous buyer-seller watermarking protocols proposed by Ju et. al and Choi et. al respectively, and prove that they do not provide the features and security as claimed. In particular, we show that i) the commutative cryptosystem used in Choi et. al's protocol fails to prevent the watermark certification authority (WCA) from discovering the watermark (fingerprint) chosen by the buyer; ii) for both protocols, the seller can discover the watermark chosen by the buyer if he colludes with the WCA. Hence, these protocols cannot guard against conspiracy attacks. We further show that these protocols only provide "partial" anonymity, ie. the buyer's anonymity is guaranteed only if WCA is honest. Our results suggest that the security of these protocols must assume the honesty of WCA, contrary to the designers' original claim. Finally, we propose a new anonymous buyer-seller watermarking protocol which is more secure and efficient, and provides true anonymity.

KW - Anonymity

KW - Copyright Protection

KW - Fingerprinting

KW - Traitor Tracing

KW - Watermarking

UR - http://www.scopus.com/inward/record.url?scp=35048873815&partnerID=8YFLogxK

U2 - 10.1007/978-3-540-24852-1_27

DO - 10.1007/978-3-540-24852-1_27

M3 - Conference Paper

AN - SCOPUS:35048873815

SN - 3540222170

SN - 9783540222170

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 369

EP - 382

BT - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

A2 - Jakobsson, Markus

A2 - Yung, Moti

A2 - Zhou, Jianying

PB - Springer

T2 - International Conference on Applied Cryptography and Network Security 2004

Y2 - 8 June 2004 through 11 June 2004

ER -

Goi BM, Phan RCW, Yang Y, Bao F, Deng RH, Siddiqi MU. Cryptanalysis of two anonymous buyer-seller watermarking protocols and an improvement for true anonymity. In Jakobsson M, Yung M, Zhou J, editors, Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics). Springer. 2004. p. 369-382. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-540-24852-1_27

Cryptanalysis of two anonymous buyer-seller watermarking protocols and an improvement for true anonymity

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Cite this