Using Smart Cards for Tamper-Proof Timestamps on Untrusted Clients

Online auctions of governmental bonds and CO2 certificates are challenged by high availability requirements in face of high peak loads around the auction deadline. Traditionally, these requirements are addressed by cluster solutions. However, with strong requirements regarding hardware ownership and only a few auctions per owner per year hardware clusters are a rather ineffective solution. Consequently, we contribute with a solution that alleviates the dependability problems by shifting them into the security domain: Key idea is to provide a secure timestamp service that allows users to place bids locally until the deadline, independent of server availability. This allows to mitigate peak-loads and network or server outages as the transfer of bids to the server can be delayed until after a performance peak or the repair of a failed component. In this paper in particular, we contribute with a secure time synchronization and timestamping protocol tailored to online auctions where we appl...

• Type: Journal
• Year: 2010
• Where: IEEEARES
• Authors: Guenther Starnberger, Lorenz Froihofer, Karl M. Göschka
• Keywords: Auctions, IEEEARES 2010, Secure Timestamps, Security Privacy, Smart Card