一种用户隐私保护数字货币的可监管方案

doi:10.19665/j.issn1001-2400.2020.05.006

摘要/Abstract

摘要：

目前一些数字货币较好地保护了用户的隐私,但缺少了可监管性,阻碍了这些数字货币的进一步推广。以门罗币为例,针对其底层技术CryptoNote提出基于群签名和知识证明的改进方案,可以实现对门罗币的监管,群管理员可以追溯疑似交易,确定交易发送方的真实身份,跟踪交易发送方已完成的交易,并在需要时撤消交易发送方的私钥,实现资金冻结。

关键词: 数字货币, 群签名, 可监管性, 隐私保护

Abstract:

The regulation of digital currency is currently a hot topic. At present, there are some digital currencies that protect user privacy well, but are unable to be regulated, which hinders the further application of these digital currencies. By taking Monero as an example, this paper proposes an improved solution based on a group signature and a knowledge proof for CryptoNote, the underlying technology of Monero, which can achieve the regulation of Monero. The group manager can trace a suspected transaction, determine the real identity of its sender, find the complete transaction list of the sender, and revoke the private key to freeze the coins of the sender when necessary.

Key words: digital currency, group signature, regulation, privacy protection

中图分类号:

TP311

田海博,林会智,罗裴然,苏吟雪. 一种用户隐私保护数字货币的可监管方案[J]. 西安电子科技大学学报, 2020, 47(5): 40-47.

TIAN Haibo,LIN Huizhi,LUO Peiran,SU Yinxue. Scheme for being able to regulate a digital currency with user privacy protection[J]. Journal of Xidian University, 2020, 47(5): 40-47.

图/表 4

参考文献 26

[1]	ATENIESE G, FAONIO A, MAGRI B, et al. Certified Bitcoins [C]//Lecture Notes in Computer Science: 8479. Heidelberg: Springer Verlag, 2014: 80-96.
[2]	EIDEFRAWY K, LAMPKINS. K. Founding Digital Currency on Secure Computation [C]//Proceedings of the 2014 ACM Conference on Computer and Communications Security. New York: ACM, 2014: 1-14.
[3]	VAN SABERHAGEN N. CryptoNote V2.0 [EB/OL].[2020-05-8]. https://cryptonote.org/whitepaper.pdf.
[4]	HOPWOOD D, BOWE S, HORNBY T, et al. Zcash Protocol Specification [EB/OL]. [2020-05-8]. https://github.com/zcash/zips/blob/master/protocol/protocol.pdf.
[5]	DUFFIELD E and HAGAN K. Darkcoin: Peer to Peer Crypto Currency with Anonymous Blockchain Transactions and an Improved Proof of Work System [EB/OL].[2020-05-8]. https://docs.dash.org/en/stable/.
[6]	POELSTRA A. Mimblewimble [EB/OL]. [2020-05-8]. http://mimblewimble.cash/20161006-WhitePaperUpdate-e9f45ec.pdf.
[7]	HINTEREGGER A, HASLHOFER B. Short Paper: an Empirical Analysis of Monero Cross-chain Traceability [C]//Lecture Notes in Computer Science: 11598. Heidelberg: Springer, 2019: 150-157.
[8]	ZHENG H, WU Q, QIN B, et al. Linkable Group Signature for Auditing Anonymous Communication [C]//Lecture Notes in Computer Science: 10946. Heidelberg: Springer Verlag, 2018: 304-321.
[9]	LIN Q. An Anonymous Digital Money Trading Supervision Method with Hidden Center [J/OL]. [2020-05-8]. http://pss-system.cnipa.gov.cn.
[10]	WU Y, FAN H, WANG X, et al. A Regulated Digital Currency[J]. Science China Information Sciences, 2019,62(3):32109.
[11]	LI Y, YANG G, SUSILO W, et al. Traceable Monero: Anonymous Cryptocurrency with Enhanced Accountability[J]. IEEE Transactions on Dependable and Secure Computing, doi 10.1109/TDSC.2019.2910058.
[12]	LIN C, HE D, HUANG X, et al. DCAP: a Secure and Efficient Decentralized Conditional Anonymous Payment System Based on Blockchain[J]. IEEE Transactions on Information Forensics and Security, 2020,15:2440-2452.
[13]	NARULA N, VASQUEZ W, VIRZA M. Zkledger: Privacy-preserving Auditing for Distributed Ledgers [C]//Proceedings of the 2018 15th USENIX Symposium on Networked Systems Design and Implementation. Berkeley: USENIX Association, 2018: 65-80.
[14]	TIAN H, CHEN X, DING Y, et al. AFCoin: a Framework for Digital Fiat Currency of Central Banks Based on Account Model [C]// Lecture Notes in Computer Science: 11449. Heidelberg: Springer Verlag, 2019: 70-85.
[15]	陈恺, 胡予濮, 肖国镇. 可撤销匿名性的可分电子现金系统[J]. 西安电子科技大学学报, 2001,28(1):57-62.
	CHEN Kai, HU Yupu, XIAO Guozhen. Anonymity-revocable Divisible E-cash System[J]. Journal of Xidian University, 2001,28(1):57-62.
[16]	TIAN H, LUO P and SU Y. A Group Signature Based Digital Currency System [C]//Proceedings of the Communications in Computer and Information Science. Heidelberg: Springer, 2020: 3-14.
[17]	TIAN H, LUO P and SU Y. An Efficient Group Signature Based Digital Currency System [C]// Proceedings of the 2020 International Symposium on Parallel Architectures, Algorithms and Programming. Heidelberg: Springer, 2020: 380-392.
[18]	ATENIESE G, CAMENISCH J, JOYE M, et al. A Practical and Provably Secure Coalition-resistant Group Signature Scheme [C]//Lecture Notes in Computer Science: 1880. Heidelberg: Springer Verlag, 2000: 255-270.
[19]	FENG H, LIU J, WU Q, et al. Traceable Decentralized Anonymous E-Cash System against Active Attackers [C]//Proceedings of the 2019 IEEE 17th International Conference on Dependable, Autonomic and Secure Computing. Piscataway: IEEE, 2019: 344-349.
[20]	BONEH D, BOYEN X, SHACHAM H. Short Group Signatures [C]//Lecture Notes in Computer Science: 3152. Heidelberg: Springer Verlag, 2004: 41-55.
[21]	LYNN B. On the Implementation of Pairing-based Cryptosystems[D]. Stanford: Stanford University, 2007.
[22]	BELLARE M, MICCIANCIO D, WARINSCHI B. Foundations of Group Signatures: Formal Definitions, Simplified Requirements, and a Construction Based on General Assumptions [C]//Lecture Notes in Computer Science: 2656. Heidelberg: Springer Verlag, 2003: 614-629.
[23]	NOETHER S. Ring Confidential Transactions [J/OL]. [2020-05-8]. http://diyhpl.us/~bryan/papers2/bitcoin/Ring%20confidential%20transactions.pdf.
[24]	BUNZ B, BOOTLE J, BONEH D, et al. Bulletproofs: Short Proofs for Confidential Transactions and More [C]//Proceedings of the 2018 IEEE Symposium on Security and Privacy. Piscataway: IEEE, 2018: 315-334.
[25]	张跃宇, 庞辽军, 苏万力, 等. 一种高效的本地验证者撤销群签名方案[J]. 西安电子科技大学学报, 2007,34(5):818-822.
	ZHANG Yueyu, PANG Liaojun, SU Wanli, et al. Efficient Group Signature Scheme with Verifier-local Revocation[J]. Journal of Xidian University, 2007,34(5):818-822.
[26]	许春香, 牛志华, 肖国镇. 没有可信机构的矢量空间秘密共享-多重签名方案[J]. 西安电子科技大学学报, 2005,32(2):225-228.
	XU Chunxiang, NIU Zhihua, XIAO Guozhen. A Vector Space Secret Sharing-multisignature Scheme without a Trusted Share Distribution Center[J]. Journal of Xidian University, 2005,32(2):225-228.

步骤	文中方案	CryptoNote方案
系统初始化	4\|M\|	2\|M\|
用户注册	\|M\|	0
用户生成一次性地址	3\|M\|	3\|M\|
用户转账	(12+4m)\|M\|+3\|P\|	(4m-2)\|M\|
节点验证	(12+4m)\|M\|+5\|P\|	4m\|M\|