计算机科学 ›› 2025, Vol. 52 ›› Issue (8): 385-392.doi: 10.11896/jsjkx.240600079

• 信息安全 • 上一篇    下一篇

基于代理人的区块链双向混币协议

冯艺萌1, 冯雁1,2, 谢四江1,2, 张青1   

  1. 1 北京电子科技学院网络空间安全系 北京 100070
    2 中国科学技术大学 合肥 230026
  • 收稿日期:2024-06-12 修回日期:2024-09-11 出版日期:2025-08-15 发布日期:2025-08-08
  • 通讯作者: 冯雁(fengy@besti.edu.cn)
  • 作者简介:(fengyimenglw@163.com)
  • 基金资助:
    科技创新2030-重大项目(2021ZD0300705);中央高校基本科研业务费资金(32820230057Z0114)

Proxy-based Bidirectional Coin Mixing Mechanism of Blockchain

FENG Yimeng1, FENG Yan1,2, XIE Sijiang1,2, ZHANG Qing1   

  1. 1 Cyberspace Security Department,Beijing Electronic Science and Technology Institute,Beijing 100070,China
    2 University of Science and Technology of China,Hefei 230026,China
  • Received:2024-06-12 Revised:2024-09-11 Online:2025-08-15 Published:2025-08-08
  • About author:FENG Yimeng,born in 2000,postgra-duate.Her main research interests include cyberspace security and blockchain.
    FENG Yan,born in 1979,postgraduate,associate professor.Her main research interests include cryptography,network security,and quantum communication network security system.
  • Supported by:
    Innovation Program for Quantum Science and Technology(2021ZD0300705) and Fundamental Research Funds for the Cental Universitles(32820230057Z0114).

摘要: 针对区块链交易图谱分析可能泄露用户隐私,第三方混币服务商不可信的情况,提出了一种无需第三方的基于代理人的双向混币协议PBShuffle。协议过程无需第三方混币服务商参与,采用代理人向汇总用户传递输出地址的方式,代理人由参与者在所有参与者中随机选择,需进行两轮混合,分别向两名汇总用户传递输出地址。协议利用双重加密方式实现对输出地址传递过程中的隐私保护,代理人仅能解密使用汇总用户公钥加密过的加密消息,汇总用户仅能得知消息由代理人传递,无法得出消息的源头参与者。通过理论分析可知协议在不可连接性、可验证性和健壮性3方面具有较高的安全性。与CoinShuffle的对比实验表明,在参与用户数量较多的情况下,PBShuffle具有更高的效率和更低的开销,更适用于实际应用。

关键词: 区块链, 隐私保护, 混币协议, 加密, 匿名性

Abstract: Aiming at the situation that blockchain transaction mapping analysis may leak users' privacy and the third-party mi-xing service providers are not trustworthy,this paper proposes an agent-based bidirectional mixing protocol PBShuffle without the need of a third party.The protocol process does not require the participation of a third-party mixing service provider,and it adopts the method of delivering the output address to the aggregated users through an agent.The agent is randomly selected by the participant among all participants and needs to perform two rounds of mixing to deliver output addresses to two aggregated users respectively.The protocol utilizes double encryption to achieve privacy protection in the process of output address delivery,the agent can only decrypt the encrypted message encrypted with the public key of the aggregated user,and the aggregated user can only know that the message is delivered by the agent,and cannot derive the source participant of the message.The protocol is theoretically analyzed to be highly secure in terms of non-connectivity,verifiability and robustness.Comparison experiments with CoinShuffle show that PBShuffle has higher efficiency and lower overhead in the case of a larger number of participating users,and is more suitable for practical applications.

Key words: Blockchain, Privacy protection, Coin mixing mechanism, Encryption, Anonymit

中图分类号: 

  • TP309
[1]NAKAMOTO S.Bitcoin:A Peer-to-Peer Electronic Cash System [EB/OL].(2008-11-01) [2024-05-29].http://bitcoin.org/bitcoin.pdf.
[2]LI X D,NIU Y K,WEI L B,et al.A Survey of Bitcoin Privacy Protection[J].Journal of Cryptologic Research,2019,6(2):133-149.
[3]BONNEAU J,NARAYANAN A,MILLER A,et al.Mixcoin:Anonymity for Bitcoin with Accountable Mixes [C]//Proceedings of the 18th International Conference on Financial Cryptography and Data Security.Berlin:Springer,2014:486-504.
[4]VALENTA L,ROWAN B.Blindcoin:Blinded,Accountable Mixes for Bitcoin [C]//Proceedings of the International Conference on Financial Cryptography and Data Security.Berlin:Springer,2015:112-126.
[5]HEILMAN E,ALSHENIBR L,BALDIMTSI F,et al.Tumble-Bit:An Untrusted Bitcoin-Compatible Anonymous Payment Hub [C]//Proceedings of the 24th Annual Network and Distributed System Security Symposium.2017:158-176.
[6]MAXWELL G.CoinSwap:Transaction Graph Disjoint Trustless Trading [EB/OL].(2013-10-30) [2024-05-29].https://bitcointalk.org/index.php?topic=321228.0.
[7]MAXWELL G.CoinJoin:Bitcoin Privacy for the Real World[EB/OL].(2013-08-22) [2024-05-29].https://bitcointalk.org/index.php?topic=279249.0.
[8]RUFFING T,MORENO P S,KATE A.CoinShuffle:Practical Decentralized Coin Mixing for Bitcoin [C]//Proceedings of the European Symposium on Research in Computer Security.Berlin:Springer,2014:345-364.
[9]ZIEGELDORF J H,GROSSMANN F,HENZE M,et al.CoinParty:Secure Multi-Party Mixing of Bitcoins [C]//Proceedings of the 5th ACM Conference on Data and Application Security and Privacy.New York:ACM,2015:75-86.
[10]HUANG Y Y,PU J.Learning Blockchain from Zero[M].Beijing:Tsinghua University Press,2020:122-128.
[11]NIEM H,OU Y Y.A Decentralized Obfuscation Scheme forDigital Currency with Customizable Amounts[J].Journal of Guangdong University of Technology,2021,38(1):64-68.
[12]CHENG Q L,JIN Y.TTShuffle:privacy protection mechanism based on two-tier shuffling in blockchain [J].Application Research of Computers,2021,38(2):363-366,371.
[13]SONG J H,LI Z K,ZHANG B C.Coin mixing mechanism inblockchain based on intermediator [J].Application Research of Computers,2022,39(3):868-873.
Viewed
Full text


Abstract

Cited

  Shared   
  Discussed   
No Suggested Reading articles found!