Secure Multiparty Computations on Bitcoin

被引：195

作者：

Andrychowicz, Marcin ^{[1
]}

Dziembowski, Stefan

Malinowski, Daniel ^{[1
]}

Mazurek, Lukasz ^{[1
]}

机构：

[1] Univ Warsaw, Warsaw, Poland

来源：

2014 IEEE SYMPOSIUM ON SECURITY AND PRIVACY (SP 2014) | 2014年

关键词：

bitcoin; multiparty; lottery;

D O I：

10.1109/SP.2014.35

中图分类号：

TP [自动化技术、计算机技术];

学科分类号：

0812 ;

摘要：

Bitcoin is a decentralized digital currency, introduced in 2008, that has recently gained noticeable popularity. Its main features are: (a) it lacks a central authority that controls the transactions, (b) the list of transactions is publicly available, and (c) its syntax allows more advanced transactions than simply transferring the money. The goal of this paper is to show how these properties of Bitcoin can be used in the area of secure multiparty computation protocols (MPCs). Firstly, we show that the Bitcoin system provides an attractive way to construct a version of "timed commitments", where the committer has to reveal his secret within a certain time frame, or to pay a fine. This, in turn, can be used to obtain fairness in some multiparty protocols. Secondly, we introduce a concept of multiparty protocols that work "directly on Bitcoin". Recall that the standard definition of the MPCs guarantees only that the protocol "emulates the trusted third party". Hence ensuring that the inputs are correct, and the outcome is respected is beyond the scope of the definition. Our observation is that the Bitcoin system can be used to go beyond the standard "emulation-based" definition, by constructing protocols that link their inputs and the outputs with the real Bitcoin transactions. As an instantiation of this idea we construct protocols for secure multiparty lotteries using the Bitcoin currency, without relying on a trusted authority (one of these protocols uses the Bitcoin-based timed commitments mentioned above). Our protocols guarantee fairness for the honest parties no matter how the loser behaves. For example: if one party interrupts the protocol then her money is transferred to the honest participants. Our protocols are practical (to demonstrate it we performed their transactions in the actual Bitcoin system), and can be used in real life as a replacement for the online gambling sites. We think that this paradigm can have also other applications. We discuss some of them.

引用

页码：443 / 458

页数：16

共 41 条

[31]

Halpern J., 2004, P THIRTYSIXTH ANN AC, P623, DOI [DOI 10.1145/1007352.1007447, 10.1145/1007352.1007447]

[32]

Ittai Abraham, 2006, P 25 ANN ACM S PRINC, P188, DOI [DOI 10.1145/1146381.1146411, 10.1145/1146381.1146393, 10.1145/1146381.1146411.8,31, DOI 10.1145/1146381.1146411.8,31]

[33]

Malkhi Dahlia, 2004, P 13 C USENIX SEC S, P20

[34] Zerocoin: Anonymous Distributed E-Cash from Bitcoin [J].

Miers, Ian ;

Garman, Christina ;

Green, Matthew ;

Rubin, Aviel D. .

2013 IEEE SYMPOSIUM ON SECURITY AND PRIVACY (SP), 2013, :397-411

[35]

Nakamoto S., 2009, Bitcoin: a peer-to-peer electronic cash system, DOI DOI 10.1007/S10838-008-9062-0

[36]

Pinkas B, 2003, LECT NOTES COMPUT SC, V2656, P87

[37] Reputation systems [J].

Resnick, P ;

Zeckhauser, R ;

Friedman, E ;

Kuwabara, K .

COMMUNICATIONS OF THE ACM, 2000, 43 (12) :45-48

[38]

Ron D., 2013, Proceeding of 17th international conference on Financial Cryptography and Data Security, V7859, P6, DOI [DOI 10.1007/978-3-642-39884-1_2, 10.1007/978-3-642-39884-12, 10.1007/978-3-642-39884-1_2]

[39]

Shamir Adi, 1979, LCSTR125 MIT

[40]

Von Ahn L., 2005, 37 ACM STOC, P513, DOI DOI 10.1145/1060590.1060668

← 1 2 3 4 5 →