Anonymous credit cards

ABSTRACT

This paper describes a communications networking technique for funds transfer which combines the privacy of cash transactions with the security, record-keeping and charging mechanisms of credit cards. The scheme uses a communications network and cryptographic protocols to separate information. The company that extends credit to the individual and collects the bill does not have access to the specific purchases, and the shop that sells the merchandise is convinced that it will be paid without learning the individual's identity.The information is separated to make it difficult to associate an individual with his purchases. Analysis of the information separation in this system shows that five parties must collude to associate an individual's identity and purchases. If an individual deposits cash into the system, rather than asking for credit, then none of the parties need to know his identity. Complete anonymity is obtained while retaining the security against loss or theft and the record keeping capabilities of credit cards.

REFERENCES

• C91: Douglas E. Comer, Internetworking with TCP/IP (2nd ed.), vol. I, Prentice-Hall, Inc., Upper Saddle River, NJ, 1991
• CZ93: Samuel T. Chanson and Jinsong Zhu, "A Unified Approach to Protocol Test Sequence Generation," Proceedings of IEEE INFOCOM '93.
• D84: D.W. Davies, "Smart cards, digital signatures, and negotiable documents," Proceedings of the International Conference on Secure Communication Systems, London, UK, February 22-23, 1984, pp. 1-4.
• D93: Semyon Dukach, "SNPP: A Simple Network Payment Protocol," submitted for publication.
• DC81: David L. Chaum, Untraceable electronic mail, return addresses, and digital pseudonyms, Communications of the ACM, v.24 n.2, p.84-90, Feb. 1981 [doi>10.1145/358549.358563]
• DC85: David Chaum, Security without identification: transaction systems to make big brother obsolete, Communications of the ACM, v.28 n.10, p.1030-1044, Oct. 1985 [doi>10.1145/4372.4373]
• DC86: David Chaum , Jan-Hendrik Evertse, A secure and privacy-protecting protocol for transmitting personal information between organizations, Proceedings on Advances in cryptology---CRYPTO '86, p.118-167, January 1987, Santa Barbara, California, United States
• DH76: W. Diffie and M. E. IIellman, "New directions in cryptography," IEEE Transactions on Information Theory, vol. 1T-22, pp. 644- 654, Nov. 1976.
• EMT89: D. Estrin, J. C. Mogul and G. Tsudik, "Visa protocls for controlling interorganizational datagram flow", IEEE Journal on Selected Areas in Communications, 7(4), May 1989.
• GU86: Louis C. Guillou , Michel Ugon, Smart card, a highly reliable and portable security device, Proceedings on Advances in cryptology---CRYPTO '86, p.464-479, January 1987, Santa Barbara, California, United States
• H90: G.J. Holzmann, "Algorithms for Automated Protocol Validation," AT&T Technical Journal, Special issue on Protocol Testing and Verification, Vol.69,No. 1 ,p p.32-44.
• H91: Gerard J. Holzmann, Design and validation of computer protocols, Prentice-Hall, Inc., Upper Saddle River, NJ, 1990
• K92: D.M. Kristol, "APSL Toolkit Handbook," AT&T Bell Laboratories.
• K93: A. S. Krishnakumar, Reachability and Recurrence in Extended Finite State Machines: Modular Vector Addition Systems, Proceedings of the 5th International Conference on Computer Aided Verification, p.110-122, June 28-July 01, 1993
• LMP93: Steven Low, Nicholas F. Maxemchuk and Sanjoy Paul, "Collusion in a Multi-Party Communication Protocol for Anonymous Credit Cards", submitted for publication.
• LSKUP93: D. Lee, K. Sabnani, D. Kristol, U. Uyar and S. Paul, "Conformance Tesing of Protocols Specified as Communicating FSMs," Proceedings of INFOCOM '93.
• LY92: David Lee , Mihalis Yannakakis, Online minimization of transition systems (extended abstract), Proceedings of the twenty-fourth annual ACM symposium on Theory of computing, p.264-274, May 04-06, 1992, Victoria, British Columbia, Canada [doi>10.1145/129712.129738]
• M88: Judy H. Moore, "Protocol failures in cryptosystems", Proceedings of the IEEE, 76(5), pp. 594-602, May 1988.
• MN93: Gennady Medvinsky , Clifford Neuman, NetCash: a design for practical electronic currency on the Internet, Proceedings of the 1st ACM conference on Computer and communications security, p.102-106, November 03-05, 1993, Fairfax, Virginia, United States [doi>10.1145/168588.168601]
• MP92: Raymond E. Miller and Sanjoy Paul, "On Generating Test Sequences for Combined Control and Data Flow for Conformance Testing of Communication Protocols," Proc. 12th. IFIP International Symposium on Protocol Specification, Testing and Verification, 1992.
• OO91: Tatsuaki Okamoto , Kazuo Ohta, Universal Electronic Cash, Proceedings of the 11th Annual International Cryptology Conference on Advances in Cryptology, p.324-337, August 11-15, 1991
• R78: M.O. Rabin, "Digitalized Signatures," Foundations of Secure Computation, R. A. DeMillo, D. P. Dobkin, A. K. Jones, and R. J. Lipton, Editors, pp. 155-168. New York: Academic Press, 1978.
• RSA78: R. L. Rivest , A. Shamir , L. Adleman, A method for obtaining digital signatures and public-key cryptosystems, Communications of the ACM, v.21 n.2, p.120-126, Feb. 1978 [doi>10.1145/359340.359342]
• S92: Gustavus J. Simmons, Contemporary Cryptology: The Science of Information Integrity, IEEE Press, Piscataway, NJ, 1994
• UY91: Hasan Ural and Bo Yang, "A Test Sequence Selection Method for Protocol Testing," IEEE Transactions on Communications, vol. 39, no. 4, April 1991.

INDEX TERMS

Primary Classification:
  E. Data
  E.3 DATA ENCRYPTION

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS

General Terms:
Security, Theory