CORBA Non-Repudiation Service Based upon a Fair Non-Repudiation Protocol

摘要

With the development of electronic commerce, non-repudiation service, as one of the basic security services, which protects the transacting principals against any false denial that a particular action or event has taken place, will become more and more critical to e-commerce applications, in which evidence will be generated, collected and maintained to enable future dispute resolution. Meanwhile, fairness is another desirable requirement. Aimming at a serious bug: the selective receipt problem existed in the non-repudiation mechanism presented by the current ISO/IEC 13888-2,3 specifications, this paper presents a fair non-repudiation protocol named FNRP. Since the current CORBA non-repudiation service specification is just based upon the non-repudiation model of the sforementioned ISO/IEC 13888 specifications and at the same time, lacks the transparent support to the high-level security-unaware applications, based upon the fair FNRP protocol, we design and implement a generic CORBA Eon-repudiation service.