A non-repudiation message transfer protocol for collaborative e-commerce

摘要

In the business world, exchange of receipts of business transactions is a common practice. These receipts serve as evidences that the transactions did take place in case of future repudiations and disputes. Likewise, it is critical in e-commerce applications to have a third party security service, which generates, distributes, validates, and maintains information and evidence of an electronic transaction. Quite a number of non-repudiation protocols have been proposed and evaluated based on some established evaluation criteria. However, in the context of collaborative e-commerce, there are additional evaluation criteria to be considered: e.g., the recipient role in the protocol execution, the degree of trust on a third party, and the dependency on the existence of a third-party for dispute settlement. In this paper, we identify a number of security requirements in collaborative e-commerce, and propose a new non-repudiation message transfer protocol, which makes use of the techniques of message digest, message encryption, double-encrypted key, and dual signatures. The protocol can satisfy the additional criteria better than the existing protocols. The implementation of the protocol in the web service platform is also presented.