Financial Cryptography and Data Security

1. Front Matter

   PDF

2. Keynote Address

   1. Leaving Room for the Bad Guys

      • Mike Bond

      Pages 1-1

3. Payment Systems

   1. Vulnerabilities in First-Generation RFID-enabled Credit Cards

      • Thomas S. Heydt-Benjamin, Daniel V. Bailey, Kevin Fu, Ari Juels, Tom O’Hare

      Pages 2-14

   2. Conditional E-Cash

      • Larry Shi, Bogdan Carbunar, Radu Sion

      Pages 15-28

   3. A Privacy-Protecting Multi-Coupon Scheme with Stronger Protection Against Splitting

      • Liqun Chen, Alberto N. Escalante B., Hans Löhr, Mark Manulis, Ahmad-Reza Sadeghi

      Pages 29-44

4. Panel

   1. Panel: RFID Security and Privacy

      • Kevin Fu

      Pages 45-45

   2. Position Statement in RFID S&P Panel: RFID and the Middleman

      • Ross Anderson

      Pages 46-49

   3. Position Statement in RFID S&P Panel: Contactless Smart Cards

      • Jon Callas

      Pages 50-52

   4. Position Statement in RFID S&P Panel: From Relative Security to Perceived Secure

      • Yvo Desmedt

      Pages 53-56

5. Anonymity

   1. A Model of Onion Routing with Provable Anonymity

      • Joan Feigenbaum, Aaron Johnson, Paul Syverson

      Pages 57-71

   2. K-Anonymous Multi-party Secret Handshakes

      • Shouhuai Xu, Moti Yung

      Pages 72-87

6. Authentication

   1. Using a Personal Device to Strengthen Password Authentication from an Untrusted Computer

      • Mohammad Mannan, P. C. van Oorschot

      Pages 88-103

   2. Scalable Authenticated Tree Based Group Key Exchange for Ad-Hoc Groups

      • Yvo Desmedt, Tanja Lange, Mike Burmester

      Pages 104-118

   3. On Authentication with HMAC and Non-random Properties

      • Christian Rechberger, Vincent Rijmen

      Pages 119-133

7. Anonymity and Privacy

   1. Hidden Identity-Based Signatures

      • Aggelos Kiayias, Hong-Sheng Zhou

      Pages 134-147

   2. Space-Efficient Private Search with Applications to Rateless Codes

      • George Danezis, Claudia Diaz

      Pages 148-162

8. Cryptography and Commercial Transactions

   1. Cryptographic Securities Exchanges

      • Christopher Thorpe, David C. Parkes

      Pages 163-178

   2. Improved Multi-party Contract Signing

      • Aybek Mukhamedov, Mark Ryan

      Pages 179-191

   3. Informant: Detecting Sybils Using Incentives

      • N. Boris Margolin, Brian N. Levine

      Pages 192-207

9. Financial Transactions and Web Services

   1. Dynamic Virtual Credit Card Numbers

      • Ian Molloy, Jiangtao Li, Ninghui Li

      Pages 208-223

The 11th International Conference on Financial Cryptography and Data Security (FC 2007, http://fc07. ifca. ai), organized by the International Financial Crypt- raphy Association (IFCA, http://www. ifca. ai/), was held in Tobago, February 12–15, 2007. The conference is a well-established and premier international - rum for research, advanced development, education, exploration, and debate - garding security in the context of ?nance and commerce. We continue to cover all aspects of securing transactions and systems, which this year included a range of technical areas such as cryptography, payment systems, anonymity, privacy, - thentication, and commercial and ?nancial transactions. For the ?rst time, there was an adjacent workshop on Usable Security, held after FC 2007 in the same - cation. The papers are included in the last part of this volume. The conference goal was to bring together top cryptographers, data-security specialists, and c- puter scientists with economists, bankers, implementers, and policy makers. The goal was met this year: there were 85 submissions, out of which 17 research papers and 1 system presentation paper were accepted. In addition, the conference featured two distinguished speakers, Mike Bond and Dawn Jutla, and two panel sessions, one on RFID and one on virtual economies. As always, there was the rump session on Tuesday evening, colorful as usual.

• DES
• Radio-Frequency Identification (RFID)
• Wi-Fi Protected Setup
• anonymity
• credential systems
• cryptography
• cryptology
• data security
• e-commerce
• e-passport
• electronic auctions
• electronic cash
• electronic voting
• financial cryptography
• privacy
• algorithm analysis and problem complexity

• Software Engineering Institute, Carnegie Mellon University, Pittsburgh, USA

  Sven Dietrich

• CRCS DEAS, Harvard University, Cambridge, USA

  Rachna Dhamija

Policies and ethics