Cryptology ePrint Archive: Report 2013/443
Optimally Anonymous and Transferable Conditional E-cash
Jiangxiao Zhang. Hua Guo. Zhoujun Li. Chang Xu
Abstract: Transferable conditional electronic-cash (e-cash) allows a payer to spend an e-cash based on the outcome not known in advance. It also allows a payee to spend the e-cash to others, or deposit the e-cash to a bank based on the future outcome. Among security properties, the anonymity of the payer has been widely studied. However, the payer is linkable in the existing conditional e-cash schemes. This paper presents the first optimally anonymous and transferable conditional electronic-cash (e-cash) system based on two recent cryptographic primitives, i.e., the Groth-Sahai(GS) proof system
and the commuting signatures, to obtain the user's unlinkability and optimal anonymity. A publisher is introduced to publish the conditions, and is firstly formalized. By dividing the deposit protocol into two parts, the anonymity of the user is obtained in the deposit protocol. Compared with the existing conditional e-cash schemes, this scheme has the constant size for the computation and communication. Finally, we give the security proof in the standard model.
Category / Keywords: cryptographic protocols / conditional e-cash
Publication Info: Securecomm2012
Date: received 13 Jul 2013
Contact author: orange_0092008 at 163 com
Available format(s): PDF | BibTeX Citation
Note: This paper is a extended version. It adds many new properties.
Version: 20130718:231503 (All versions of this report)
Short URL: ia.cr/2013/443
Discussion forum: Show discussion | Start new discussion
[ Cryptology ePrint archive ]