Journal of the Korea Institute of Information Security & Cryptology (정보보호학회논문지)

Korea Institute of Information Security and Cryptology (한국정보보호학회)
권호 표지
DOI QR코드

DOI QR Code

Weakness and Improvements of Yong-Lee's Anonymous Fingerprinting Protocol

Yong-Lee의 익명 핑거프린팅 프로토콜의 안전성 취약점 및 개선 방안

  • Sohn, Ki-Wook (National Security Research Institute) ;
  • Lee, Yun-Ho (Information Security Group School of Information and Communication Engineering Sungkyunkwan University) ;
  • Won, Dong-Ho (Information Security Group School of Information and Communication Engineering Sungkyunkwan University)
  • 손기욱 (국가보안기술연구소) ;
  • 이윤호 (성균관대학교 정보통신공학부 정보보호연구소) ;
  • 원동호 (성균관대학교 정보통신공학부 정보보호연구소)
  • Published : 2006.12.31
Download PDF
⟨ Previous Next ⟩

Abstract

In 2005, Yong and Lee proposed a buyer-seller fingerprinting protocol using symmetric and commutative encryptions. They claimed that their protocol was practical and anonymous since they used symmetric and commutative encryptions. However, an attacker can get the content embedded with one or more honest buyers' fingerprints using man-in-the-middle attack. In this letter, we point out the weakness and propose methods for improving to their protocol.

2005년, Yong과 Lee는 buyer-seller 핑거프린팅 프로토콜을 제안하면서, 대칭(symmetric) 암호계와 가환(commutative) 암호계를 이용하기 때문에 속도가 빠르고 익명성을 갖는다고 주장한 바 있다. 그러나 이 방식은 공격자가 man-in-the-middle 방법을 이용하여 공격할 경우 정당한 사용자의 핑거프린트가 포함된 콘텐츠를 얻을 수 있는 문제가 있다. 본 논문에서는 Yong-Lee 방식의 안전성 취약점을 살펴보고 이를 막을 수 있는 방안을 제시한다.

Keywords

References

  1. S.Yong and S.Lee, 'An Efficient Fingerprinting Scheme with Symmetric and Commutative Encryption,' IWDW 2005, LNCS 3710, pages 54-66, 2005
  2. F.Bao, R.H.Deng and P.Feng, 'An Efficient and Practical Scheme for Privacy Protection in the E-Commerce of Digital Goods,' ICICS' 00, LNCS 2836, pages 162-170, 2001
  3. C.C.Chang and C.Y.Chung, 'An Enhanced Buyer-Seller Watermarking Protocol,' Proc. of ICCT 2003, pages 1779-1783, 2003
  4. J.G.Choi, J.H.Park and K.R.Kwon, 'Analysis of COT-based Fingerprinting Schemes: New Approach to Design Practical and Secure Fingerprinting Scheme,' IHW 2004, LNCS 3200, pages 253-265, 2004