Digital Payment Systems with Passive Anonymity-Revoking Trustees

In: Computer Security { ESORICS 96, volume 1146 of Lecture Notes in Computer Science, pp. 33 { 43, Springer-Verlag, 1996. Abstract. Anonymity of the participants is an important requirement for some applications in electronic commerce, in particular for payment systems. Because anonymity could be in con ict with law enforcement, for instance in cases of blackmailing or money laundering, it has been proposed to design systems in which a trustee or a set of trustees can selectively revoke the anonymity of the participants involved in suspicious transactions. From an operational point of view, it can be an important requirement that such trustees are neither involved in payment transactions nor in the opening of an account, but only in case of a justi ed suspicion. In this paper we propose the rst e cient anonymous digital payment systems satisfying this requirement. The described basic protocol for anonymity revocation can be used in on-line or o -line payment systems.