一个新的分布式安全电子拍卖协议

基于Shamir的（t＋1，n）门限方案和公钥加及数字签名提出一个适于分布式松耦合发布／预约系统使用的安全电子拍卖协议。协议除满足了安全分布式拍卖的基本需求外，还保证了代理拍卖服务器的不可否认性及投标者的匿名性。与先前工作相比，新协议具有较多的安全特性，而且更适合于分布式大规模拍卖。松耦合发布预约结构广泛使用于可扩展 自适应的分布式系统中，它的灵活性使之为许多应用所采用。但是，在不安全的通信环境中，这种结构缺乏容错性和安全支持，新协议可以在分布式松耦合发布／预约系统中实现安全性和容错性，同时具有适当的运行效率。最后，我们对协议设计的正确性和效率进行了详尽分析。

A New Distributed Secure Electronic Auction Protocols

Auction is one of the most important financial transactions for setting price. The Internet provides a unique distributed environment allowing distributed Internet electronic auction that offers a unique opportunity to reach a large bidding population. In a distributed environment, it is necessary to provide the required function and security properties in the face of unreliable network communication and random failures of important components such as auction servers. Franklin and Reiter have given a solution in the context of monetary bids. Their solution focuses on using a cryptographic technique to provide protections to monetary bids, such as digital cash bids. It inherits certain properties from the digital cash scheme used for the bids. In their solution, every bidding message and auction server synchronization message requires atomic multicast primitives, which can be a bottleneck in a large system. In this paper, we present a new distributed secure electronic auction protocols based on Shamir's threshold secret sharing scheme and public-key encryption and signatures. The new protocol is designed for loosely coupled publish/subscribe architecture. It maintains the basic properties for secure electronic auction, and guarantees non-repudiation and anonymity of the bidders. It can tolerate Byzantine failures of one third of the auction servers and any number of bidders. Furthermore it provides a bid receipt service, which is often desirable in financial activities, and can be used by a bidder to prove that his bid was entered before the bidding was closed. Compared with previous work, our protocol is more secure, and suitable for large-scale distributed auctions. Loosely coupled publish/subscribe architectures have been widely used for scalable, adaptable distributed systems. Their flexibility makes them desirable infrastructures for many applications. But they generally lack fault tolerance and security support in malicious environments. Our protocol integrates fault tolerance and security in loosely coupled publish/subscribe architectures in a systematic way. Finally, the efficiency and validity of the protocol are analyzed in detail.