Anonymous Multiphase Transactions via Distributed Pseudonyms
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing protocols for anonymous transactions over distributed computer networks fail to provide satisfactory solutions for multiphase transactions while maintaining user anonymity, as they are either computationally and communicationally expensive or rely on centralized authorities, leading to bottlenecks and single points of failure.
Innovation Solution
A method for anonymously conducting multiphase transactions using a network with a trusted authority, user's computer, and service provider servers, where each computer/server has dedicated software with a one-way function to generate unique pseudonyms for each server involved, allowing unlinkable or linkable transactions without relying on a central authority, using secret random numbers or hard-to-produce evidence and Interactive Zero Knowledge Proofs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If centralized Janus proxy server is used for anonymous communication, then user anonymity is preserved, but system reliability deteriorates due to single point of failure and bottleneck
Solution Approach 1:
The patent divides the centralized anonymous communication system into multiple distributed servers. Instead of one central Janus proxy server, the system uses multiple servers that can independently handle anonymous communication requests. This segmentation eliminates the single point of failure and distributes the computational load, improving system reliability while maintaining anonymity through the distributed architecture.
2Reliability
If Public Key Infrastructure (PKI) is used for anonymous credentials, then security is improved, but computational cost increases significantly
Solution Approach 1:
The patent changes the cryptographic parameters and protocols used in anonymous communication. Instead of relying on computationally expensive PKI with digital certificates, the system uses alternative cryptographic approaches such as mixing networks and cryptographic protocols that provide comparable security with lower computational overhead. This parameter change maintains security while reducing the energy and computational cost significantly.
3Productivity
If traditional anonymous communication protocols are used, then anonymity is maintained, but transaction efficiency deteriorates in multiphase transactions
Solution Approach 1:
The patent implements preliminary actions by establishing cryptographic credentials and trust relationships before the actual transactions occur. The system pre-configures anonymous credentials, sets up mixing networks, and establishes cryptographic protocols in advance. This preliminary preparation enables multiphase transactions to proceed efficiently without compromising anonymity, as the foundational security infrastructure is already in place and optimized for the specific transaction sequence.
Data Source
Figure 1a~1d
Figure 2
Figure 3a~3c
AI summary
The invention is a method for anonymously carrying out multiphase transactions over a distributed computer network that comprises a trusted authority, a user's computer, and servers of one or more service providers. Each of the computers/servers in the network comprises dedicated software that contains a one-way function and other information and instructions necessary to execute the method. The method comprises two stages. In the first stage a user anonymously authenticates himself/herself by means of a unique pseudonym to each of the servers that are involved in the transaction. In the second stage the user proves to each of the servers that it is a single entity that has interacted with each of the servers in the first stage and therefore has made all of the preparations necessary to execute the multiphase transaction. One of the features that characterize the invention is that the user's computer uses the one way function to produce a unique user name and password for each user-server pair from a random seed provided by the trusted authority and the IP address of each of the servers involved in the transaction.