BLOCKCHAIN SYSTEM FOR CONFIDENTIAL AND ANONYMOUS SMART CONTRACTS

• US 20190164153A1
• Filed: 11/30/2018
• Published: 05/30/2019
• Est. Priority Date: 11/30/2017
• Status: Active Grant

• Current Assignee: Board of Trustees of the Leland Stanford Junior University (Stanford Management Co.), Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Agrawal, Shashank, Bunz, Karl Benedikt, Zamani, Mahdi, Boneh, Dan
• Granted Patent: US 11,257,077 B2
• Time in Patent Office: Days
• CPC Class Codes: G06Q 20/065 using e-cash
• CPC Class Codes: G06Q 20/0658 e-cash managed locally
• CPC Class Codes: G06Q 20/3678 e-cash details, e.g. blinded, divisible or detecting double spending
• CPC Class Codes: G06Q 20/3827 Use of message hashing
• CPC Class Codes: G06Q 20/383 Anonymous user system
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/008 involving homomorphic encryption
• CPC Class Codes: H04L 9/0637 Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]
• CPC Class Codes: H04L 9/3218 using proof of knowledge, e.g. Fiat-Shamir, GQ, Schnorr, ornon-interactive zero-knowledge proofs
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees

Abstract

Blockchain-based, smart contract platforms have great promise to remove trust and add transparency to distributed applications. However, this benefit often comes at the cost of greatly reduced privacy. Techniques for implementing a privacy-preserving smart contract is described. The system can keep accounts private while not losing functionality and with only a limited performance overhead. This is achieved by building a confidential and anonymous token on top of a cryptocurrency. Multiple complex applications can also be built using the smart contract system.

Claims

1. A method comprising:

storing, by a computing device, a set of entries representing a state of a platform smart contract in a blockchain network, the set of entries including at least;

a first entry comprising a first public key associated with a first account, and a first ciphertext representing a first balance of the first account;

a second entry comprising a second public key associated with a second account, and a second ciphertext representing a second balance of the second account; and

a third entry comprising a third public key associated with a third account, and a third ciphertext representing a third balance of the third account;

locking, by the platform smart contract executing on the computing device, at least the first, second, and third accounts to an application smart contract;

executing, by the computing device, the application smart contract to perform one or more transactions causing the first balance to be decremented by a first amount and the second balance to be incremented by a second amount;

unlocking, by the application smart contract executing on the computing device, at least the first, second, and third accounts from the application smart contract;

updating, by the computing device, the first ciphertext by adding a first operand ciphertext to the first ciphertext, the first operand ciphertext being generated by encrypting a negative of the first amount using the first public key; and

updating, by the computing device, the second ciphertext by adding a second operand ciphertext to the second ciphertext, the second operand ciphertext being generated by encrypting the second amount using the second public key.

2. The method of claim 1, further comprising:

updating the third ciphertext by adding a third operand ciphertext to the third ciphertext, the third operand ciphertext being generated by encrypting zero using the third public key.

3. The method of claim 1, wherein the first account is locked in response to receiving a lock request from a user device associated with the first account, the lock request including the first public key, a smart contract address associated with the application smart contract, and a signature generated based on the smart contract address.

4. The method of claim 3, wherein the lock request is received during a particular epoch, and wherein locking of the first account occurs in a subsequent epoch after the particular epoch, each epoch corresponding to a predetermined number of blocks in a blockchain of the blockchain network.

5. The method of claim 3, wherein while the first account is locked to the application smart contract, only the application smart contract is permitted to unlock the first account.

6. The method of claim 1, wherein the one or more transactions include a transaction to decrement the first amount from the first balance, wherein the transaction is stored as a pending transfer transaction of the first account during a particular epoch, and wherein rollover of the pending transfer transaction to the first account occurs in a subsequent epoch after the particular epoch, each epoch corresponding to a predetermined number of blocks in a blockchain of the blockchain network.

7. The method of claim 6, wherein the rollover of the pending transfer transaction is performed in response to receiving a subsequent transaction involving the first account.

8. The method of claim 1, wherein transaction data of the transaction in the blockchain network includes a signature generated based on an epoch base derived from hashing a predetermined string and an epoch number of an epoch during which the transaction is initiated, wherein each epoch corresponds to a predetermined number of blocks in a blockchain of the blockchain network.

9. The method of claim 1, wherein the application smart contract is one of a sealed-bid auction smart contract, a payment channel smart contract, a stake voting smart contract, or a proof-of-stake smart contract.

10. The method of claim 1, wherein the platform smart contract and the application smart contract are written in a cryptocurrency platform programming language.

11. A computing system comprising:

a processor; and

a memory storing executable instructions, which when executed by the processor, causes the computing system to perform operations including;

storing a set of entries representing a state of a platform smart contract in a blockchain network, the set of entries including at least;

a first entry comprising a first public key associated with a first account, and a first ciphertext representing a first balance of the first account;

a second entry comprising a second public key associated with a second account, and a second ciphertext representing a second balance of the second account; and

a third entry comprising a third public key associated with a third account, and a third ciphertext representing a third balance of the third account;

locking, by the platform smart contract, at least the first, second, and third accounts to an application smart contract;

executing the application smart contract to perform one or more transactions causing the first balance to be decremented by a first amount and the second balance to be incremented by a second amount;

unlocking, by the application smart contract, at least the first, second, and third accounts from the application smart contract;

updating the first ciphertext by adding a first operand ciphertext to the first ciphertext, the first operand ciphertext being generated by encrypting a negative of the first amount using the first public key; and

updating the second ciphertext by adding a second operand ciphertext to the second ciphertext, the second operand ciphertext being generated by encrypting the second amount using the second public key.

12. The computing system of claim 11, wherein the operations further include:

updating the third ciphertext by adding a third operand ciphertext to the third ciphertext, the third operand ciphertext being generated by encrypting zero using the third public key.

13. The computing system of claim 11, wherein the first account is locked in response to receiving a lock request from a user device associated with the first account, the lock request including the first public key, a smart contract address associated with the application smart contract, and a signature generated based on the smart contract address.

14. The computing system of claim 13, wherein the lock request is received during a particular epoch, and wherein locking of the first account occurs in a subsequent epoch after the particular epoch, each epoch corresponding to a predetermined number of blocks in a blockchain of the blockchain network.

15. The computing system of claim 13, wherein while the first account is locked to the application smart contract, only the application smart contract is permitted to unlock the first account.

16. The computing system of claim 11, wherein the one or more transactions include a transaction to decrement the first amount from the first balance, wherein the transaction is stored as a pending transfer transaction of the first account during a particular epoch, and wherein rollover of the pending transfer transaction of the first account occurs in a subsequent epoch after the particular epoch, each epoch corresponding to a predetermined number of blocks in a blockchain of the blockchain network.

17. The computing system of claim 16, wherein the rollover of the pending transfer transaction is performed in response to receiving a subsequent transaction involving the first account.

18. The computing system of claim 16, wherein transaction data of the transaction includes a signature generated based on an epoch base derived from hashing a predetermined string and an epoch number of an epoch during which the transaction is initiated, wherein each epoch corresponds to a predetermined number of blocks in a blockchain of the blockchain network.

19. The computing system of claim 11, wherein the application smart contract is one of a sealed-bid auction smart contract, a payment channel smart contract, a stake voting smart contract, or a proof-of-stake smart contract.

20. The computing system of claim 11, wherein the platform smart contract and the application smart contract are written in a cryptocurrency platform programming language.