比特币隐私保护综述  

Overview on Privacy Protection in Bitcoin

作　　者：李旭东 牛玉坤[1] 魏凌波 张驰[1] 俞能海[1] LI Xu-Dong;NIU Yu-Kun;WEI Ling-Bo;ZHANG Chi;YU Neng-Hai(CAS Key Laboratory of Electromagnetic Space Information,University of Science and Technology of China,Hefei 230027,China;State Key Laboratory of Information Security,Institute of Information Engineering,Chinese Academy of Sciences,Beijing 100093,China)

机构地区：[1]中国科学技术大学中科院电磁空间信息重点实验室,合肥230027 [2]中国科学院信息工程研究所信息安全国家重点实验室,北京100093

出　　处：《密码学报》2019年第2期133-149,共17页Journal of Cryptologic Research

基　　金：国家重点研发计划(2017YFB0802200);国家自然科学基金(61702474)~~

摘　　要：比特币是利用区块链技术为支撑,以去中心化方式实现的密码货币.其通过使用公钥地址作为假名隐藏用户真实身份达到匿名,然而全网公开的区块链账本对用户隐私构成了极大威胁,也引起了学术界的广泛关注.首先,从隐私保护角度出发,研究现有的比特币协议存在的缺陷及可能受到的攻击.然后从不需要修改现有比特币协议的混币技术、离链支付协议,和修改现有比特币协议的密码学方案,如隐蔽地址技术、环签名、零知识证明、同态加密,两个方向探讨对比特币隐私保护做出的改进.最后展望比特币及区块链隐私保护研究工作.Bitcoin is a cryptographic currency supported by the Blockchain technic and implemented in a decentralized manner,and it uses public key address as a pseudonym to hide the real identity of users to achieve anonymity.However,the public Blockchain ledger in the network is available to everyone,thus,it poses a great threat to users’privacy,and has also attracted wide attention from the academic community.In this report,firstly,from the perspective of privacy protection,the limitation and possible attacks of existing Bitcoin protocols are studied.Then,this paper focuses on the improvements of privacy protection in Bitcoin protocol from two aspects:one is not to modify the existing Bitcoin protocol such as coin-mixing technology,off-chain payment protocol,etc.,and the other is to make some modifications with cryptography techniques such as stealth address,ring signature,zero-knowledge proofs,homomorphic encryption.Finally,challenges and perspectives of privacy protection of Bitcoin and Blockchain are discussed.

关 键 词：比特币 区块链 匿名 隐私保护 零知识证明 

分 类 号：TP311.13[自动化与计算机技术—计算机软件与理论] TN918.4[自动化与计算机技术—计算机科学与技术]