2003 Publications

M. Al-Meaither and C. J. Mitchell. A secure electronic Murabaha transaction. In Proceedings of eTransformation, 16th Bled eCommerce Conference, pages 662-674. University of Maribor, 2003.

M. Al-Meaither and C. J. Mitchell, 'A secure electronic payment scheme for charity donations', in: E-Commerce and Web Technologies - 4th International Conference, EC-Web 2003, Prague, Czech Republic, September 2003, Proceedings, Springer-Verlag (LNCS 2738), Berlin (2003), pp.50-61.

M. Al-Meaither and C. J. Mitchell, 'Extending EMV to support Murabaha transactions' (pdf), in: NORDSEC 2003, Proceedings of the Seventh Nordic Workshop on Secure IT Systems - Encouraging Cooperation, Gjøvik University College, Norway, October 2003, Department of Telematics, NTNU, Trondheim, Norway, 2003, pp.95-108.

S.S. Al-Riyami and K.G. Paterson. Tripartite authenticated key agreement protocols from pairings. K.G. Paterson (ed), Proc. IMA Conference on Cryptography and Coding, Lecture Notes in Computer Science Vol. 2898, pp.332-359, Springer-Verlag, Berlin, 2003.

S.S. Al-Riyami and K.G. Paterson. Certificateless public key cryptography, In C.S. Laih (ed), Proc. Asiacrypt 2003, Lecture Notes in Computer Science Vol. 2894, pp. 452-473, Springer-Verlag, Berlin, 2003. Full version at IACR preprint server.

S.R. Blackburn. Combinatorial schemes for protecting digital content. In C.D. Wensley, editor, Surveys in Combinatorics 2003, pages 43-78. Cambridge University Press, Cambridge, 2003.

S.R. Blackburn. An upper bound on the size of a code with the k-identifiable parent property. Journal of Combinatorial Theory - Series A, 102:179-185, 2003.

S.R. Blackburn. Frameproof codes. SIAM Journal of Discrete Mathematics, 16:499-510, 2003.

S.R. Blackburn and A.J. Spencer. Products of subsets in an abelian group. Journal of Combinatorial Theory - Series A, 103:53-68, 2003.

S. R. Blackburn, D. Gomez-Perez, J. Gutierrez and I. E. Shparlinski. Predicting the inversive generator. To appear in Proceedings of the 9th IMA International Conference on Cryptography and Coding.

N. Borselius and C. J. Mitchell. Securing FIPA agent communication. In H. R. Arabnia and Y. Mun, editors, Proceedings of the 2003 International Conference on Security and Management (SAM'03), volume 1, pages 135-141. CSREA Press, 2003.

C. Boyd, W. Mao and K.G. Paterson. Deniable authenticated key establishment for Internet protocols. To appear in Proceedings of the Cambridge Protocols Workshop 2003. Springer LNCS.

Z. Ciechanowicz, K.M. Martin, F.C. Piper and M. J. B. Robshaw. Ten years of Information Security Masters programmes: reflections and new challenges. In Security Education and Critical Infrastructures, pages 215-230. Kluwer Academic Publishers, 2003.

J. Crampton and G. Loizou. Administrative scope: A foundation for role-based administrative models. ACM Transactions on Information and System Security, 6(2):201-231, 2003.

J. Crampton. Specifying and enforcing constraints in role-based access control. In Proceedings of the 8th ACM Symposium on Access Control Models and Technologies (SACMAT03), pages 43-50. 2003.

J. Crampton and H. Khambhammettu. Access control in a distributed object environment using XML and roles. In Proceedings of 3rd Annual Information Security South Africa Conference (ISSA 2003), pages 75-87. 2003.

J. Crampton. On permissions, inheritance and role hierarchies. To appear in Proceedings of the 10th ACM Conference on Computer and Communications Security (CCS2003).

A. W. Dent, A Designer's Guide to KEMs, Proceedings of the 9th IMA Conference in Cryptography and Coding, Lecture Notes in Computer Science, Vol. 2898, pp 133-151, Springer-Verlag, 2003. Full version available from the IACR pre-print server.

A. Gajparia, C. J. Mitchell and C. Yeun, 'Using constraints to protect personal location information' (pdf), in: Proceedings of VTC 2003 Fall, IEEE Semiannual Vehicular Technology Conference, Orlando, Florida, October 2003, IEEE Press, 2003.

M. Guillermo, K.M. Martin and C.M. O'Keefe. Providing anonymity in unconditionally secure secret sharing schemes. To appear in Designs Codes and Cryptography.

T. Hsu. Identifying threats to trust relationships in IC card-based systems. In Proceedings of the 3rd Annual Information Security South Africa Conference (ISSA), pages 53-64. ISSA, 2003.

T. Hsu. Security requirements and application scenarios for national identification card schemes. In Proceedings of the 3rd Annual Information Security South Africa Conference (ISSA), pages 283-296. ISSA, 2003.

C.-L. Hsu, T.-S. Wu, T.-C. Wu and C.J. Mitchell. Improvement of modified authenticated key agreement protocol. Applied Mathematics and Computation, 142:305-308, 2003.

P. Jarupunphol and C.J. Mitchell. PKI implementation issues in B2B e-commerce. In U. E. Gattiker, editor, EICAR Conference Best Paper Proceedings, Copenhagen, Denmark, May 2003, 14 pages.

P. Jarupunphol and C. J. Mitchell. Measuring 3-D Secure and 3D SET against e-commerce end-user requirements. In Proceedings of the 8th Collaborative electronic commerce technology and research conference (CollECTeR (Europe) 2003), pages 51-64. Centre for Innovation and Structural Change (CISC), 2003.

V. Khu-smith and C. J. Mitchell, 'Enhancing e-commerce security using GSM authentication', in: E-Commerce and Web Technologies - 4th International Conference, EC-Web 2003, Prague, Czech Republic, September 2003, Proceedings, Springer-Verlag (LNCS 2738), Berlin (2003), pp.72-83. [See also: Royal Holloway, University of London, Mathematics Department Technical Report RHUL-MA-2002-3, December 2002, 13 pages].

L.R. Knudsen and C.J. Mitchell. Analysis of 3gpp-MAC and two-key 3gpp-MAC. Discrete Applied Mathematics, 128:181-191, 2003.

A.G.B. Lauder and K.G. Paterson. Computing the error linear complexity spectrum of a binary sequence of period 2^n. IEEE Transactions on Information Theory, 49(1):273-280, 2003.

K. Markantonakis and K. Mayes. An overview of GlobalPlatform Card specification. Elsevier Information Security Technical Report, 8(1):17-29, 2003.

K.M. Martin, J. Pieprzyk, R. Safavi-Naini, H. Wang and P.R. Wild. Threshold MACs. In Proceedings of the 5th International Conference on Information Security and Cryptology (ICISC 2002), Lecture Notes in Computer Science 2587, pages 237-252. Springer-Verlag, 2003.

K. Mayes and K. Markantonakis. Are we smart about security? Elsevier Information Security Technical Report, 8(1):6-16, 2003.

K. Mayes and K. Markantonakis. The Smart Card Centre at Royal Holloway University of London. Secure - the Silicon Trust Report 1, 2003.

K. Mayes and K. Markantonakis. Smart Cards: enabling e-government. The Global Journal of Advanced Card Technology - Smart Card Technology International, 66-70, 2003.

C. J. Mitchell. Key recovery attack on ANSI retail MAC. Electronics Letters, 39:361-362, 2003.

C. J. Mitchell, 'Truncation attacks on MACs' (pdf), Electronics Letters, 39 (2003) 1439-1440.

C. J. Mitchell, 'Remote user authentication using public information' (pdf), in: Cryptography and Coding, 9th IMA International Conference on Cryptography and Coding, Cirencester, UK, December 2003, Proceedings, Springer-Verlag (LNCS 2898), Berlin (2003), pp.360-369. [A copy of the PowerPoint presentation made at the conference is also available].

S. Murphy and C. J. Mitchell, 'Comment: Property of finite fields and its cryptographic application' (pdf), Electronics Letters, 39 (2003) 1646.

S.-L. Ng. Posets and protocols - picking the right three-party protocol. IEEE Journal on Selected Areas in Communications, 21(1):55-61, January 2003.

S.-L. Ng. A representation of a family of secret sharing matroids. Designs, Codes and Cryptography, 30(1):5-19, August 2003.

M.G. Parker, C. Tellambura and K.G. Paterson. Golay Complementary Sequences. To appear in John G. Proakis, editor, Wiley Encyclopedia of Telecommunications, Wiley.

P. Pagliusi and C. J. Mitchell, 'PANA/IKEv2: An Internet authentication protocol for heterogeneous access' (pdf), in: Information Security Applications, 4th International Workshop, WISA 2003, Jeju Island, Korea, August 25-27, 2003, Revised Papers, Springer-Verlag LNCS 2908, Berlin (2003), pp.135-149.

P. Pagliusi and C. J. Mitchell, 'PANA/GSM authentication for Internet access' (pdf), in: Proceedings of SympoTIC '03, Joint IST Workshop on Mobile Future and Symposium on Trends in Communications, Bratislava, Slovakia, October 2003, IEEE Press, 2003, pp. 146-152.

A. Pashalidis and C. J. Mitchell. A taxonomy of single sign-on systems. In R. Safavi-Naini and J. Seberry, editors, Information Security and Privacy - 8th Australasian Conference, ACISP 2003, Wollongong, Australia, July 9-11 2003, Proceedings, Springer-Verlag LNCS series volume 2727), pages 249-264. Springer-Verlag, Berlin, 2003.

A. Pashalidis and C. J. Mitchell, 'Single sign-on using trusted platforms' (pdf), in: C. Boyd and W. Mao (eds.) Information Security, 6th International Conference, ISC 2003, Bristol, UK, October 2003, Proceedings, Springer-Verlag (LNCS 2851), Berlin (2003), pp.54-68. [See also: Royal Holloway, University of London, Mathematics Department Technical Report RHUL-MA-2003-3, March 2003, 15 pages].

A. Pashalidis and C. J. Mitchell, 'Using GSM/UMTS for single sign-on' (pdf), in: Proceedings of SympoTIC '03, Joint IST Workshop on Mobile Future and Symposium on Trends in Communications, Bratislava, Slovakia, October 2003, IEEE Press, 2003, pp. 138-145.

A. Pashalidis, A Cautionary Note on Automatic Proxy Configuration, in M.H. Hamza (editor), Proceedings of the IASTED International Conference on Communication, Network, and Information Security CNIS 2003, pages 153-158, December 10-12, 2003, New York, USA. The presentation is also available.

K.G. Paterson. On codes with low peak-to-average power ratio for multi-code CDMA. To appear in IEEE Transactions on Information Theory.

K.G. Paterson and G. Price, A comparison between traditional Public Key Infrastructures and Identity-Based Cryptography, Information Security Technical Report, Vol. 8(3) (2003), 57-72.

G. Price, F. Piper and K.G. Paterson, editors, PKI revisited - current issues and future trends, Information Security Technical Report, Vol. 8(3) (2003).

L. Rila and C. J. Mitchell. Security protocols for biometrics-based cardholder authentication in smartcards. In J. Zhou, M. Yung and Y. Han, editors, Applied Cryptography and Network Security - Proceedings of the First MiAn International Conference on Applied Cryptography and Network Security (ACNS 03), 2846, pages 258-268. Springer-Verlag LNCS series, 2003.

S. Xenitellis and P. Jarupunphol. Security vulnerabilities in the Trust-List PKI. In Proceedings of the International Conference on Security and Management (SAM'03), pages 72-77. CSREA Press, 2003.

S. Xenitellis and Craig Valli. A case study in the security of network-enabled devices. In Proceedings of the 2nd European Conference on Information Warfare and Security (ECIW 2003), pages 357-364, MCIL, 2003.

P.-W. Yau and C. J. Mitchell. Simple techniques for enhancing the robustness of DSR. In Proceedings of the 3rd Scandinavian Workshop on Wireless Ad-hoc networks (ADHOC '03), Stockholm, Sweden, May 2003.

P.-W. Yau and C. J. Mitchell. Security vulnerabilities in ad hoc networks. In Proceedings of the 7th International Symposium on Communication Theory and Applications (ISCTA '03), pages 99-104. HW Communications Ltd. 2003.

P. Yau and C. J. Mitchell, 'Reputation methods for routing security for mobile ad hoc networks' (pdf), in: Proceedings of SympoTIC '03, Joint IST Workshop on Mobile Future and Symposium on Trends in Communications, Bratislava, Slovakia, October 2003, IEEE Press, 2003, pp. 130-137.

O. Zakaria and A. Gani. A Conceptual Checklist of Information Security Culture. To be presented at the 2nd European Conference on Information Warfare and Security, 2003.

O. Zakaria and P. Jarupunphol. Understanding the role of information security culture. To be presented at the International Conference on E-Society, Lisbon, Portugal, June 2003.

O. Zakaria, P. Jarupunphol and A. Gani. Paradigm mapping for information security culture approach. In Proceedings of the 4th Australian Information Warfare & IT Security Conference, Adelaide, Australia, 2003.