Cryptology ePrint Archive: Report 2013/443

Optimally Anonymous and Transferable Conditional E-cash

Jiangxiao Zhang. Hua Guo. Zhoujun Li. Chang Xu

Abstract: Transferable conditional electronic-cash (e-cash) allows a payer to spend an e-cash based on the outcome not known in advance. It also allows a payee to spend the e-cash to others, or deposit the e-cash to a bank based on the future outcome. Among security properties, the anonymity of the payer has been widely studied. However, the payer is linkable in the existing conditional e-cash schemes. This paper presents the first optimally anonymous and transferable conditional electronic-cash (e-cash) system based on two recent cryptographic primitives, i.e., the Groth-Sahai(GS) proof system and the commuting signatures, to obtain the user's unlinkability and optimal anonymity. A publisher is introduced to publish the conditions, and is firstly formalized. By dividing the deposit protocol into two parts, the anonymity of the user is obtained in the deposit protocol. Compared with the existing conditional e-cash schemes, this scheme has the constant size for the computation and communication. Finally, we give the security proof in the standard model.

Category / Keywords: cryptographic protocols / conditional e-cash

Publication Info: Securecomm2012

Date: received 13 Jul 2013

Contact author: orange_0092008 at 163 com

Available format(s): PDF | BibTeX Citation

Note: This paper is a extended version. It adds many new properties.

Version: 20130718:231503 (All versions of this report)

Short URL: ia.cr/2013/443

Discussion forum: Show discussion | Start new discussion