Limited-traceability systems
First Claim
1. In a machine-implemented payment system method, the improvement comprising the steps of:
- forming with an automated machine, signals representing tracing signals depending on tracing key data substantially concealed by at least one trustee party apparatus; and
convincing at least one party, while keeping the tracing key data secret from that party, that the tracing key data allows linking of payment data with data representing payer accounts;
such that without the tracing key data of the at least one trustee party apparatus it is infeasible to link payment transaction data with data representing payer accounts and that with the cooperation of the at least one trustee party apparatus using the tracing key data, at least under predetermined conditions, at least a predetermined linking is feasible.
19 Assignments
0 Petitions
Accused Products
Abstract
Cryptographic methods and apparatus for payment and related transaction systems are disclosed that allow some kinds of tracing under some conditions and make substantially infeasible other kinds of tracing under other conditions. Examples include: allowing tracing if and only if agreed sets of trustees cooperate; tracing from a payment to the payer by cooperation of a set of trustees; tracing from a payment to the payer without revealing to trustees which payer is being traced or which payment; identifying all payments by a payer provided appropriate trustees cooperate; and identifying all payments by a payer under investigation without trustees learning which payer and/or which payments;
Other examples include: limiting resolution to groups of payers in tracing for statistical purposes; allowing limited different markings of payment instruments while preventing payers from learning which marking they receive; providing for recovery of lost money without compromise of unrelated transactions; allowing participants the ability to retain, not forward, and even destroy some tracing information without financial harm; providing the option of artificial increase in the computational cost of at least some tracing; and providing the option of blurry linking of payments to payers.
144 Citations
51 Claims
-
1. In a machine-implemented payment system method, the improvement comprising the steps of:
-
forming with an automated machine, signals representing tracing signals depending on tracing key data substantially concealed by at least one trustee party apparatus; and convincing at least one party, while keeping the tracing key data secret from that party, that the tracing key data allows linking of payment data with data representing payer accounts; such that without the tracing key data of the at least one trustee party apparatus it is infeasible to link payment transaction data with data representing payer accounts and that with the cooperation of the at least one trustee party apparatus using the tracing key data, at least under predetermined conditions, at least a predetermined linking is feasible. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 42)
-
-
26. In a machine-implemented blind signature system method, the improvement comprising the steps of:
-
forming at least part of one blinding signal from a restricted distribution that is dependent upon tracing information; and convincing at least one party that at least the restricted distribution that is dependent upon tracing information substantially applies without revealing the at least part of the blinding signal to the at least one party. - View Dependent Claims (27, 28, 29, 30, 31, 32, 33, 37, 38, 39, 40)
-
- 34. In a machine-implemented blind signature system method, the improvement comprising the step of developing a blinding value in a reproducible computation that uses a seed key substantially known only to an account holder party.
-
41. In a payment system apparatus, the improvement comprising:
-
means for forming tracing signals dependent on tracing key data being substantially concealed by at least one trustee party apparatus; and means for convincing at least one party, while keeping the tracing key data secret from that party, that the tracing key data allows linking of payment data with data representing payer accounts; such that without the tracing key data of the at least one trustee party apparatus it is infeasible to link payment transaction data with payer accounts and that with the cooperation of the at least one trustee party apparatus using the tracing key data, at least under predetermined conditions, at least a predetermined linking is feasible. - View Dependent Claims (43, 44, 45, 46, 47, 48, 49, 50)
-
-
51. In a payment system apparatus, the improvement comprising:
-
means for providing a blind signature type of signal associated with electronic payment data; and means for forming at least part of one blinding signal from a restricted distribution that is dependent upon tracing information; and means for convincing at least one party that at least the restricted distribution that is dependent upon tracing information substantially applies without revealing the at least part of the blinding signal to the at least one party.
-
Specification