Published Paper Details:

With the growth of Internet usage, e-Auction systems have become popular and became an electronic market place for many. They enable users to sell and purchase goods on a large scale. There are several challenges in implementing e- Auction systems. Stakeholders located at geographically different locations can cheat auction systems. Furthermore, fake auction systems might target people and lure them. Though there are a few secure e-Auction systems in use that focus on preventing fraud from sellers and bidders, challenges still exist. Fraudulent auction transactions happen when the auctioneer is compromised. This paper proposes a fraud-resistant auctioneer model, which provides privacy and security using Intel SGX in a Trusted Execution Environment (TEE). It has less attack surface and provides better attack protection to the application. This paper discusses the design and implementation of the proposed secure and trustable e-Auction system. The proposed model, in a typical attack scenario: i) can verify the authenticity of the data and security using keys and digital signatures, ii) protects from exposing the sensitive information of buyers and sellers and, hence privacy is protected, iii) the winner decision making process is made by TEE, so is trustable.