Blind Certification of Public Keys and Efficiently Revocable Cash: Secure

[摘要] Electronic cash should be revocable in order to nullify the effect of attacks mounted by a capable attacker (e.g. double spending by reverse-engineering tamper- resistant devices). For prudent engineering considerations, cash revocability forms a necessary complementary measure to using tamper-resistant devices, adding system security while lowering system cost by reducing the level of physical tamper resistance required. We propose a revocable cash scheme. Cash revocation is achieved efficiently via withdrawing an attacker's ability to further use the system. In several ways the new scheme improves from previous ones (including trustee-based tracing techniques, e.g., [5, 14, 19]), that identify the attacker and revoke cash in terms of publishing a blacklist of coins misused or robbed. Firstly, the new scheme can stop the attacker from further using the system without need of physical confiscation of him/her or his/her devices (physical confiscation is difficult over the network). Secondly, it will achieve a better performance due to avoiding real-time checking through a potentially big coin revocation list. Thirdly, without using trustee, the system serves unconditional privacy for honest users and uses simpler protocols for transactions.

[发布机构] HP Development Company

[学科分类] 计算机科学（综合）

[关键词] electronic cash;blind certification of public keys;revocation;cryptography