| 摘要: | 隨著網路技術的進步，數位內容的散佈變得越來越容易。 內容散佈系統 (content distribution system) 允許原創作者將數位內容上傳至內容散佈者所提供的平台上，而內容散佈者會負責散佈這些數位內容。事實上，原創作者可能會想要販售他們所創作的數位內容，因此需要散佈者的協助來販售商品。舉例來說，一個音樂工作室可以將他們所創作的音樂上傳至iTunes，消費者可以從iTunes 所提供的平台購買音樂。音樂工作室 可以賺取版權費而內容散佈者可賺取散佈費。 然而，目前在內容散佈系統下的付費協定，其交易過程都需要一個可信任的仲裁者(broker)的介入，意即現在多數的付費協定為線上的協定(on-line protocol)。由於可信任的仲裁者頻繁的介入，系統的效率會降低，而且仲裁者的計算能力亦可能成為系統的瓶頸。有鑒於此，本研究提出兩個適用於內容散佈系統的離線付費協定。 第一個付費協定強調交易時的公平性。在交易的過程中，由於沒有仲裁者的介入，消費者可能會擔心在給予電子金錢後，沒有辦法收到相對應的數位內容。同樣的，散佈者(商家)亦會擔心在給予數位內容後，消費者不會給予電子金錢。本研究將並存簽章(concurrent signature)與代理轉密法(Proxy re-encryption)結合並做適當的修改，達成公平的密文/簽章交換 之協定。 本研究所提出的第二個協定為強調效率的小額付費協定。當數位內容的價格相當低廉的時候，內容散佈者所面對的交易量可能非常的龐大，因此付費系統的效率是需要被考量的。本研究將聚集簽章(aggregatesignature)與變色龍雜湊(chameleon hash)與PayWord 結合並做適當的修改，達成一個有效率的小額付費協定。With the widespread use of the internet, there are more and more e-commerce systems being developed. Digital contents such as audio, video, or articles can be distributed easily, and many digital contents now can be sold on the internet. Content distribution system (CDS) is a system where the original authors can upload their contents onto a distributor and the distributor will spread the contents. In fact, some authors may wish to sell their contents, so they may ask the distributor to help them sell their works. For example, a music studio can upload their music onto iTunes and customers can buy music from iTunes. The original author can earn royalty fees and the distributor can earn distribution fees. Most existing payment protocols in CDS need the on-line involvement of a trusted broker. Due to the frequent involvement of the trusted broker, it will reduce the efficiency of the system, and the computational capability of the broker may become the bottleneck of the system. In our works, we present two off-line payment protocols in CDS. The first proposed payment protocol will focuse on the fairness issues. A customer (buyer) may not trust the distributor that the distributor will honestly give him the content after he signed a valid signature as a check. On the other hand, the distributor may not trust the customer either. We proposed a payment protocol with fair ciphertext/signature exchange procedure, which garantees that both parties either recieves or not revieve the intended things. We combine the proxy re-encryption scheme and concurrent signature into a fair ciphertext/signature exchange procedure. The second proposed payment protocol is a micropayment protocol that will focuse on the efficiency issues. When the price of the content is extremely low, the distributor may deal with a lot of transactions at the same time. The computational cost of bank and distributor should be low enough such that the system can work correctly. We use aggregate signature, chameleon hash, and payword to construct a micropayment protocol in which the verification of signatures is delayed and in batch. Although the verification of signatures is delayed, the second proposed protocol contains a dispute handling procedure, which guarantees that even if the disputes happen, the broker can still handle it. |
