One-show blind signature systems

• US 4,914,698 A
• Filed: 07/24/1989
• Issued: 04/03/1990
• Est. Priority Date: 03/16/1988
• Status: Expired due to Term

• Current Assignee: Van Detsan Networks LLC (Intellectual Ventures LLC)
• Original Assignee: David Chaum
• Inventors: Chaum, David
• Primary Examiner(s): Cangialosi, Salvatore
• Application Number:
  US07/384,092
• Time in Patent Office: 253 Days
• Field of Search: 380/25, 380/30
• US Class Current: 380/30
• CPC Class Codes: G06Q 20/06 Private payment circuits, e.g. involving electronic currency used among participants of a common payment scheme
• CPC Class Codes: G06Q 20/3678 e-cash details, e.g. blinded, divisible or detecting double spending
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/302 involving the integer factorization problem, e.g. RSA or quadratic sieve [QS] schemes
• CPC Class Codes: H04L 9/3257 using blind signatures

Abstract

Numbers standing for cash money can be spent only one time each, otherwise the account from which they were withdrawn would be revealed. More generally, a technique for issuing and showing blind digital signatures ensures that if they are shown responsive to different challanges, then certain information their signer ensures they contain will be revealed and can be recovered efficiently. Some embodiments allow the signatures to be unconditionally untraceable if shown no more than once. Extensions allow values to be encoded in the signatures when they are shown, and for change on unshown value to be obtained in a form that is aggregated and untraceable.

Claims

1. In a public key digital signature system, a method of digitally signing comprising the steps of:

issuing a plurality of signatures to ensure that each said signature contains identifying information divided between at least two parts;

showing and checking said digital signatures to reveal at least one of said at least two parts of each; and

performing a test on a set of said signatures shown, that would yield at least one of said identifiers if different parts of at least one of said issued signatures had been revealed in showing the at least one issued signature more than once.