Author | Conference | Journal | Organization | Year | DOI
Look for results that meet for the following criteria:
Academic
Publications
Using Smart Cards for Tamper-Proof Timestamps on Untrusted Clients
Edit
Using Smart Cards for Tamper-Proof Timestamps on Untrusted Clients   (Citations: 2)
BibTex | RIS | RefWorks Download
Online auctions of governmental bonds and CO2 certificates are challenged by high availability requirements in face of high peak loads around the auction deadline. Traditionally, these requirements are addressed by cluster solutions. However, with strong requirements regarding hardware ownership and only a few auctions per owner per year hardware clusters are a rather ineffective solution.Consequently, we contribute with a solution that alleviates the dependability problems by shifting them into the security domain: Key idea is to provide a secure timestamp service that allows users to place bids locally until the deadline, independent of server availability. This allows to mitigate peak-loads and network or server outages as the transfer of bids to the server can be delayed until after a performance peak or the repair of a failed component.In this paper in particular, we contribute with a secure time synchronization and timestamping protocol tailored to online auctions where we apply secure timestamps on smart cards locally connected to the bidder's computer. Moreover, our timestamping protocol is robust with respect to man-in-the-middle delay attacks. Finally, we prove the feasibility of our approach based on a .NET smart card implementation and conclude with a discussion of current smart card limitations.
Conference: Availability, Reliability and Security - IEEEARES , pp. 96-103, 2010
Cumulative Annual
View Publication
The following links allow you to view full publications. These links are maintained by other sources not affiliated with Microsoft Academic Search.
More »
    • ...This allows us to decouple the auction deadline from bid submission, because clients can locally timestamp bids using a smart card and a secure time synchronization protocol [24] and transmit those bids to the server at a later time...
    • ...To facilitate this approach, we apply secure client-side timestamps [24] that can then be used by the server to verify the time of bid submission...
    • ...In our system, security critical components are executed within secure smart cards, including software to maintain the current time with a secure time synchronization protocol [24]...

    Guenther Starnberger, et al. Adaptive run-time performance optimization through scalable client req...

    • ...Consequently, we introduced a smartcardbased secure timestamping protocol that solves the new security challenges [28]...
    • ...The first prerequisite to temporal decoupling is a secure smart card running the security-critical parts of the application such as time synchronization and time stamping of bid submissions [25, 28]...
    • ...Goeschka discussed in our trust model [28]...

    Lorenz Froihofer, et al. Experience Report: Trading Dependability, Performance, and Security th...

Order by:

Citations (2)

Share this on | Contribute to Academic