Bitcoin Forum
November 19, 2017, 09:01:18 AM *
News: Latest stable version of Bitcoin Core: 0.15.1  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: Research Paper: Evaluating User Privacy in Bitcoin  (Read 1875 times)
Stephen Gornick
Legendary
*
Offline Offline

Activity: 2310



View Profile
April 08, 2013, 11:42:30 AM
 #1

by Elli Androulaki, Ghassan Karame, Marc Roeschlin, Tobias Scherer and Srdjan Capkun
Evaluating User Privacy in Bitcoin

Presented at Financial Cryptography and Data Security 2013
Seventeenth International Conference, April 1–5, 2013, Okinawa, Japan

 - http://fc13.ifca.ai/proc/1-3.pdf
 - http://docs.google.com/viewer?url=http%3A%2F%2Ffc13.ifca.ai%2Fproc%2F1-3.pdf  <-- Web browser view using Google Docs

 - http://fc13.ifca.ai/slide/1-3.pdf
 - http://docs.google.com/viewer?url=http%3A%2F%2Ffc13.ifca.ai%2Fslide%2F1-3.pdf  <-- Web browser view using Google Docs


Quote
Abstract:
We evaluate the privacy that is provided by Bitcoin (i) by analyzing the genuine Bitcoin system and (ii) through a simulator that faith-fully mimics the use of Bitcoin within a university. In this setting, our results show that the profiles of almost 40% of the users can be, to a large extent, recovered even when users adopt privacy measures recommended by Bitcoin. To the best of our knowledge, this is the first work that comprehensively analyzes, and evaluates the privacy implications of Bitcoin.

1511082078
Hero Member
*
Offline Offline

Posts: 1511082078

View Profile Personal Message (Offline)

Ignore
1511082078
Reply with quote  #2

1511082078
Report to moderator
1511082078
Hero Member
*
Offline Offline

Posts: 1511082078

View Profile Personal Message (Offline)

Ignore
1511082078
Reply with quote  #2

1511082078
Report to moderator
1511082078
Hero Member
*
Offline Offline

Posts: 1511082078

View Profile Personal Message (Offline)

Ignore
1511082078
Reply with quote  #2

1511082078
Report to moderator
Join ICO Now A blockchain platform for effective freelancing
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1511082078
Hero Member
*
Offline Offline

Posts: 1511082078

View Profile Personal Message (Offline)

Ignore
1511082078
Reply with quote  #2

1511082078
Report to moderator
1511082078
Hero Member
*
Offline Offline

Posts: 1511082078

View Profile Personal Message (Offline)

Ignore
1511082078
Reply with quote  #2

1511082078
Report to moderator
Sergio_Demian_Lerner
Hero Member
*****
Offline Offline

Activity: 539


View Profile WWW
April 09, 2013, 12:09:16 AM
 #2

Good paper.

There are two other heuristics that can be added to track users,

Let x = sum of the input amounts, minus the amount in the lowest input, minus the fee

1. the "change" address always receives less money than x
2. the "payee" address always receives more money than x
Mike Hearn
Legendary
*
Offline Offline

Activity: 1526


View Profile
April 09, 2013, 02:41:55 PM
 #3

Oh good, it's out. Will have to discuss this with Elli next time I see her.

The paper can be summarized as follows. Bitcoin leaks private information today in various ways. It is possible to measure this and run statistical clustering algorithms on the block chain. There are a variety of possible solutions, though the paper and presentation is pessimistic on this point.

Actually I'm much more optimistic. Nothing in this research is news to us and the seeds of solutions are already planted. I insisted the payment protocol support specification of multiple outputs in a payment and multiple transactions during the design phase for exactly this reason - it means when people transact they can request payments to multiple keys made in unrelated transactions:

https://github.com/gavinandresen/paymentrequest/blob/master/spec.rst

The recipient can then broadcast the set of received transactions with some jitter, though at high traffic rates you probably don't need to jitter their broadcast very much to make them unlinkable. Wallets can attempt to target particular coin sizes to minimise the amount of linkability. For instance if you want to pay 30 bitcoins and you have 5, 15 and 10 coin outputs in three different transactions, you can create and sign over 3 transactions that move those outputs independently, without leakage, as long as the recipient has given you three requested outputs. They may ask for more or less, depending on their own coin size targeting algorithm, but over time somewhat regular coin sizes would coverge.

With regards to mixing, p2p mixing is possible and designs for it were already proposed on this forum. So their claim that mixing requires centralisation isn't really correct. It would be a nice enhancement to the system in future.
justusranvier
Legendary
*
Offline Offline

Activity: 1400



View Profile WWW
April 09, 2013, 02:49:56 PM
 #4

as long as the recipient has given you three requested outputs.
BIP 32 extended public keys would allow the sender to break the payment up into an arbitrary number of outputs without requiring any special effort on the part of the recipient.
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!