TY - GEN
T1 - Spending offline divisible coins with combining capability
AU - Chida, Eikoh
AU - Kasai, Yosuke
AU - Mambo, Masahiro
AU - Shizuya, Hiroki
PY - 2002/1/1
Y1 - 2002/1/1
N2 - In the purchase with electronic money customers are sometimes required to spend multiple electronic coins at a time. In case of physical coins a customer simply grabs multiple coins and hands them out to a merchant. Likewise, the customer spends multiple electronic coins just by giving all coins to the merchant. However, we can expect one step further in the electronic coins. There is room to create a combined coin from multiple coins. If the combining leads to an efficient spending, the customer as well as the merchant and the bank can get benefit of the reduction of cost. There is a proposal by Chaum for the combining operation in the online cash, but no method has been proposed for offline coins up to now. Thus we seek a way to spend offline electronic coins in a combined form without assistance of an issuing bank. The combining reduces either computational complexity associated with the spending or communication complexity between the customer and the merchant. We propose a method to achieve combining capability in the Eng-Okamoto offline divisible electronic cash, and show that (2n − 2)|p| − (n − 1)|q| bits of the message length can be reduced in the combining of n coins under the parameter of moduli p and q satisfying q|p−1. If preliminary computation is allowed, the verification cost is also slightly reduced. Significantly, even after combining coins, the bank can identify overspenders.
AB - In the purchase with electronic money customers are sometimes required to spend multiple electronic coins at a time. In case of physical coins a customer simply grabs multiple coins and hands them out to a merchant. Likewise, the customer spends multiple electronic coins just by giving all coins to the merchant. However, we can expect one step further in the electronic coins. There is room to create a combined coin from multiple coins. If the combining leads to an efficient spending, the customer as well as the merchant and the bank can get benefit of the reduction of cost. There is a proposal by Chaum for the combining operation in the online cash, but no method has been proposed for offline coins up to now. Thus we seek a way to spend offline electronic coins in a combined form without assistance of an issuing bank. The combining reduces either computational complexity associated with the spending or communication complexity between the customer and the merchant. We propose a method to achieve combining capability in the Eng-Okamoto offline divisible electronic cash, and show that (2n − 2)|p| − (n − 1)|q| bits of the message length can be reduced in the combining of n coins under the parameter of moduli p and q satisfying q|p−1. If preliminary computation is allowed, the verification cost is also slightly reduced. Significantly, even after combining coins, the bank can identify overspenders.
KW - Anonymity
KW - Combined coin
KW - Combining capability
KW - Efficiency
KW - Offline divisible coins
KW - Overspending prevention
UR - http://www.scopus.com/inward/record.url?scp=84974670940&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=84974670940&partnerID=8YFLogxK
M3 - Conference contribution
AN - SCOPUS:84974670940
SN - 9783540362319
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 339
EP - 353
BT - Progress in Cryptology - INDOCRYPT 2002 - 3rd International Conference on Cryptology in India, Proceedings
A2 - Sarkar, Palash
A2 - Menezes, Alfred
PB - Springer-Verlag
T2 - 3rd International Conference on Cryptology in India, INDOCRYPT 2002
Y2 - 16 December 2002 through 18 December 2002
ER -