Zero knowledge proving method suitable for protecting privacy of block chain, and medium

Abstract

The invention discloses a zero knowledge proving method suitable for protecting the privacy of a block chain, and a medium. UTXO of Bitcoins and a balance model of Ethereum can be supported, and wellcombined with a smart contract, so that the security of the scheme can be further enhanced, the application scene of the scheme can be extended, and aiming at a zero knowledge certificate designed bya specific algebraic structure of a transaction, even a light node can also generate a proving process. The technical scheme is as follows: the method comprises a system parameter in an initializationphase (including a generation process and meaning of the parameter), a specific process of generating the zero knowledge certificate in a certificate generating phase (including ciphertext generatedin the process, and involved formula and parameter), and a verification phase (including verification formula and condition).

Description

technical field [0001] The invention relates to the privacy protection technology of the block chain, in particular to a zero-knowledge proof method in the privacy protection of the block chain. Background technique [0002] As a public account book, the blockchain system solves the consensus problem established by the trust of all parties. Every participant can obtain a complete data backup, and all transaction data is open and transparent, which is an advantage of the blockchain, but on the other hand, for many blockchain applications, this feature is fatal of. Because in many cases, not only users themselves want their account privacy and transaction information to be protected, but as far as commercial organizations are concerned, many account and transaction information are important assets and business secrets of these organizations, and they do not want to share them publicly with peers, especially for sensitive Data needs to balance privacy protection and complianc...

AI Technical Summary

Problems solved by technology

Although this method is highly anonymous, its risk assessment is not in place, and an anonymous third party must be relied on

[0007] 2. The balance on the public ledger is directly encrypted, and only the node itself or the relevant party that grants the rights can see the transaction information, and the rest of the nodes cannot operate the data, and the ledger information is difficult to maintain consistency

For example, Zcash is a cryptocurrency that achieves zero-knowledge anonymity by introducing the zero-knowledge proof technology zk-SNARKs. When using Zcash for transactions, neither the addresses of the parties to the transaction nor the transaction amount will be exposed, but Zcash uses The scenario is relatively limited. ZCash is only aimed at the UTXO model of Bitcoin, and cannot be extended to the balance model of Ethereum, and cannot support smart contracts well; in terms of performance, Zcash needs circuit conversion when generating proofs, and the calculations consumed The resources and time are very large, so Zcash light nodes do not use SNARK technology at all when initiating transactions, but only full nodes use SNARK technology; when generating system parameters, Zcash must have one or more strong centers to generate system parameters, There is also a trapdoor that controls the entire system hidden in the system parameters; and its usage scenarios are relatively simple, and the SNARK technology in Zcash currently has no other applications

Images