Affiliations: [a] Department of Computer Science, ETH Zürich, 8092 Zürich, Switzerland, E-mail: [email protected], [email protected] | [b] Union Bank of Switzerland, Ubilab, Bahnhofstrasse 45, 8021 Zürich, Switzerland, E-mail: [email protected]
Note: [*] A preliminary version of this paper appeared in Computer Security – ESORICS'96, E. Bertino, H. Kurth, G. Martella, E. Montolivo, eds, Lecture Notes in Computer Science, Vol. 1146, Springer-Verlag, 1996, pp. 33-43.
Abstract: Anonymity of the participants is an important requirement for some applications in electronic commerce, in particular for payment systems. Because anonymity could be in conflict with law enforcement, for instance in cases of blackmailing or money laundering, it has been proposed to design systems in which a trustee or a set of trustees can selectively revoke the anonymity of the participants involved in a suspicious transaction. From an operational point of view, it can be an important requirement that such trustees are neither involved in payment transactions nor in the opening of an account, but only in case of a justified suspicion. In this paper we present an efficient anonymous digital payment systems satisfying this requirement. The described basic protocol for anonymity revocation can be used in on-line or off-line payment systems.
Keywords: Digital payment systems, electronic money, cryptography, privacy, anonymity revocation
