Efficient trace and revoke schemes

Moni Naor, Benny Pinkas

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

194 Scopus citations


Our goal is to design encryption schemes for mass distribution of data in which it is possible to (1) deter users from leaking their personal keys, (2) trace which users leaked keys to construct an illegal decryption device, and (3) revoke these keys as to render the device dysfunctional. We start by designing an efficient revocation scheme, based on secret sharing. It can remove up to t parties and is secure against coalitions of size t. The performance of this scheme is more efficient than that of previous schemes with the same properties. We then show how to combine the revocation scheme with traitor tracing and self enforcement schemes. More precisely, how to construct schemes such that (1) Each user’s personal key contains some sensitive information of that user (e.g., the user’s credit card number), and therefore users would be reluctant to disclose their keys. (2) An illegal decryption device discloses the identity of users that contributed keys to construct the device. And, (3) it is possible to revoke the keys of corrupt users. For the last point it is important to be able to do so without publicly disclosing the sensitive information.

Original languageEnglish
Title of host publicationFinancial Cryptography - 4th International Conference, FC 2000, Proceedings
EditorsYair Frankel
PublisherSpringer Verlag
Number of pages20
ISBN (Print)3540427007
StatePublished - 2001
Externally publishedYes
Event4th International Conference on Financial Cryptography, FC 2000 - Anguilla, Anguilla
Duration: 20 Feb 200024 Feb 2000

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349


Conference4th International Conference on Financial Cryptography, FC 2000

Bibliographical note

Publisher Copyright:
© Springer-Verlag Berlin Heidelberg 2001.


  • Blacklisting
  • Broadcast encryption
  • Copyright protection
  • Self enforcement
  • Tracing traitors
  • User revocation


Dive into the research topics of 'Efficient trace and revoke schemes'. Together they form a unique fingerprint.

Cite this