Lightweight Security Primitives for E-Commerce

Emerging applications in electronic commerce often involve very low-cost transactions, which execute in the context of ongoing, extended clientserver relationships. For example, consider a website (server) which o ers repeated authenticated personalized stock quotes to each of its subscribers (clients). The value of a single transaction (e.g., delivery of a web-page with a customized set of quotes) does not warrant the cost of executing a handshake and key distribution protocol. Also, a client might not always use the same machine during such an extended relationship (e.g., a PC at home, a laptop on a trip). Typical transport/session-layer security mechanisms such as SSL and S-HTTP either require handshake/key distribution for each transaction or do not support client mobility. We propose a new security framework for extended relationships between clients and servers, based on persistent shared keys. We argue that this is a preferred model for inexpensive transactions executing within...

• Type: Conference
• Year: 1997
• Where: USITS
• Authors: Yossi Matias, Alain J. Mayer, Abraham Silberschatz
• Keywords: Extended Clientserver Relationships, Extended Relationships, Persistent Shared Keys, USITS 1997, USITS 2001