Optimistic Synchronous Multi-Party Contract Signing

        A contract is a non-repudiable agreement on a given contract text, i.e., a contract can be used to prove agreement between its signatories to any verifier. A contact signing protocol is used to fairly compute a contact so that, even if n-1 of the n signatories misbehave, either all or none of the them obtain a contract.
        Optimistic contract signing protocols use a third party to ensure fairness, but in such a way that the third party is not actively involved in case all parties are honest. Since no satisfactory protocols without any third party exist, this seems to be the best one can hope for.
        We present an optimistic multi-party contract signing protocol for synchronous networks. The construction is significantly more efficient than the only known asynchronous multi-party contract signing protocol, and only 2-3 times more expensive than the trivial solution using an inline third party.
        We show how to use multi-party contract signing to efficiently solve other atomicity problems securely, in particular optimistic certified mail and optimistic fair exchange of signatures. We also outline a generic construction for optimistic multi-party fair exchange.

By: N. Asokan, B. Baum-Waidner, M. Schunter, M. Waidner

Published in: RZ3089 in 1999

LIMITED DISTRIBUTION NOTICE:

This Research Report is available. This report has been submitted for publication outside of IBM and will probably be copyrighted if accepted for publication. It has been issued as a Research Report for early dissemination of its contents. In view of the transfer of copyright to the outside publisher, its distribution outside of IBM prior to publication should be limited to peer communications and specific requests. After outside publication, requests should be filled only by reprints or legally obtained copies of the article (e.g., payment of royalties). I have read and understand this notice and am a member of the scientific community outside or inside of IBM seeking a single copy only.

rz3089.ps

Questions about this service can be mailed to reports@us.ibm.com .