Related questions
Question
Transcribed Image Text:To ensure the integrity and authentication of a message while transferring funds in a banking scenario, follow the outlined steps using public and private key cryptography:
### Scenario:
A user, Andy, wants to transfer funds to another user, Sam, using a banking application. The app must send a message to the bank’s server authorizing the transfer.
### Notation Used:
- \( K^+_A, K^-_A \): Andy’s Public Key, Andy’s Private Key
- \( K^+_B, K^-_B \): Bank Server’s Public Key, Bank Server’s Private Key
- \( m \): Message to be transmitted
- \( H(m) \): Hash of a given message \( m \)
### Steps to Ensure Integrity and Authentication:
1. **Message Preparation:**
- Andy’s banking application prepares the message \( m \) containing the transaction details.
2. **Hashing:**
- Compute the hash \( H(m) \) of the message \( m \).
3. **Signing the Hash:**
- Use Andy's private key \( K^-_A \) to encrypt the hash, creating a digital signature for the message. This ensures authenticity and verifies the sender's identity.
4. **Message Encryption:**
- Encrypt the entire message \( m \) along with the digital signature using the bank server's public key \( K^+_B \). This ensures confidentiality during transmission.
5. **Transmission:**
- Send the encrypted message and digital signature to the bank’s server.
6. **Decryption by Bank:**
- Upon receipt, the bank uses its private key \( K^-_B \) to decrypt the message and signature.
7. **Verification:**
- Extract the hash from the decrypted signature using Andy's public key \( K^+_A \).
- Compute a new hash of the received message \( m \) and compare it with the extracted hash to verify integrity.
8. **Action:**
- If both hashes match, the message is authenticated and has not been tampered with. The bank server processes the transaction.
This process ensures secure and verified communication between a user’s banking app and the bank server, maintaining integrity and authentication.
### Diagram (Explanation):
The diagram illustrates the transformation and processing of the message \( m \) starting from Andy’s Banking Application to the Bank Server. It visually represents the steps of hashing, signing, encrypting
Expert Solution
This question has been solved!
Explore an expertly crafted, step-by-step solution for a thorough understanding of key concepts.
Step by stepSolved in 3 steps with 1 images
Knowledge Booster
Similar questions
- Consider the case of calculating the price of all the products in an customer order. A sequence diagram can provide the information starting from the method “calculating_ the_price”. Hint: - define the objects that are needed so that starting from an order (initial object) to find out the prices of the items and then the total. - starting from an instance of the order define the messages that are passed between the objects in that use case. Example: from the order the messages: get_quantity , get_item are sent to the next object (order_line). - after that there are other sequence messages for the prices (get_prices). - after having done that for all the items the order needs to compute an overall discount (compute_discount). - the method: get_discount_info is invoked and the discount is sent to the customer.arrow_forwardDraw an ER diagram for the following car sharing system: In the car sharing system, a CarMatch application has record of anyone who would like to share his/her car, known as a CarSharer. An Administrator registers all the potential CarSharers and with their first name, last name, home address, and date of birth. Each CarSharer is also assigned a unique id. A CarSharer can take policies issued by the Insurance Company. Each policy has a number, premium, and a start date. A CarSharer needs to know the start and destination address of each Journey.arrow_forwardIn game engine and development, what is a standard client-application looks like. For context in developing my own game engine, the client would have to have a layer class and some Application class that will contain all those layers. Another thing to side-note is this would be great if you can visually show in C++ pseudo-code as part of your explanation, thank you.What is a standard way to design the client's perspective project API. Would they be layered-based? How do complex engines abstract these layers portion code, so users do not have to worry about creating instances of these layers?An example is unreal engine after the user creates a new project is generated the source files for the model, actor, world, and etc. In this context how does large engines abstract or in other words look into designing an effective API for the user to allow to focus on the actual development of the game, instead of the boilerplate of their client-side code?arrow_forward
- Design and implement a java program for the above class diagram. Here, you haveto calculate the compound interest for saving accounts (3.2% per year). As youknow, the user should not be able to withdraw money from a savings account but canwithdraw from the current account. The user should maintain a threshold in the currentaccount. If it goes below, the bank will charge some penalty. The tasks area. User can deposit, update, display the balance from both accounts (Savingsand current)b. Calculate interest and sum to savings accountc. Allow to withdraw only in current and goes below some level, charge apenaltyarrow_forwardQ# 1The view is always implemented as a graphical user interface. Group of answer choices a. True b. False Q#2 , Why should listeners be implemented in the view? Group of answer choices a. It should not, because listeners are listening for user input they belong in the controller. b. It is the job of the view to take user input. c. In order to make the controller independent of the specific choice of the GUI toolkit. d. So that the user can view what they are inputting.arrow_forwardWrite the JAVA code for the following UML Diagram Account -ownerName : String -balance : double -accountNumber : String +inputDetails(): void +displayDetails(0: void +depositAmount(amount: double) +withdrawAmount(amount: double) SavingAccount CurrentAccount -rateOflnterest: double |-overDraftLimit: double +inputDetails(): void +showDetails(: void +getinputDetails(): void +displayDetails(): voidarrow_forward
arrow_back_ios
arrow_forward_ios