Non-repudiation and digital signature of a dishonest participant
Yes, the solution is that her public key needs to be stored in a place that is and will be accessible to Bob.

(such as in Bob's database)

I had not realized that importance of that before reading your question.