Returned-value blind signature systems
First Claim
1. In a method for transferring value between parties that is based on public-key-digital blind signatures, the improvement comprising the steps of:
- diminishing the value of a first blind signature by a first party from an original value to a diminished value;
communicating said diminished value of said first blind signature in a first message to at least a second party by said first party;
communicating a blinded second message to said second party by said first party;
checking the validity of said signature contained in said first message received by at least said second party;
forming by said second party of a second digital signature on said blinded second message received, and the type of second signature formed responsive to the type of signature checked on said first message, and where the relationship between the type of signature checked on said first message and the type of said second signature formed being such that a higher-valued signature checked corresponds to a lower-valued second signature formed; and
communicating by said second party said formed second signature to said first party.
19 Assignments
0 Petitions
Accused Products
Abstract
A payer party obtains from a signer party by a blind signature system a first public key digital signature having a first value in a withdrawal transaction; the payer reduces the value of the first signature obtained from the first value to a second value and provides this reduced-value form of the signature to the signer in a payment transaction; the signer returns a second digital signature to the payer by a blind signature system in online consummation of the payment transaction; the paper derives from the first and the second signature a third signature having a value increased corresponding to the magnitude of the difference between the first and the second values. Furthermore, the following additional features are provided: payments are unlinkable to withdrawals; a shop between the payer and signer can be kept from obtaining more value than desired by the payer; the first value need not be revealed to the signer or intermediary in the payment transaction; the returned difference can be accumulated across multiple payment transactions; and the returned difference can be divided between a plurality of payment transactions.
141 Citations
14 Claims
-
1. In a method for transferring value between parties that is based on public-key-digital blind signatures, the improvement comprising the steps of:
-
diminishing the value of a first blind signature by a first party from an original value to a diminished value; communicating said diminished value of said first blind signature in a first message to at least a second party by said first party; communicating a blinded second message to said second party by said first party; checking the validity of said signature contained in said first message received by at least said second party; forming by said second party of a second digital signature on said blinded second message received, and the type of second signature formed responsive to the type of signature checked on said first message, and where the relationship between the type of signature checked on said first message and the type of said second signature formed being such that a higher-valued signature checked corresponds to a lower-valued second signature formed; and communicating by said second party said formed second signature to said first party. - View Dependent Claims (2, 3, 4, 5, 6, 7)
-
-
8. Apparatus for transferring value between parties that is based on public-key-digital blind signatures, the improvement comprising:
-
means for diminishing the value of a first blind signature by a first party from an original value to a diminished value; means for communicating said diminished value of said first blind signature in a first message to at least a second party by said first party; means for communicating a blinded second message to said second party by said first party; means for checking the validity of said signature contained in said first message received by at least said second party; means for forming by said second party of a second digital signature on said blinded second message received, and the type of second signature formed responsive to the type of signature checked on said first message, and where the relationship between the type of signature checked on said first message and the type of said second signature formed being such that a higher-valued signature checked corresponds to a lower-valued second signature formed; and means for communicating by said second party, only if said check is satisfied, said formed second signature to said first party. - View Dependent Claims (9, 10, 11, 12, 13, 14)
-
Specification