New system makes it harder to track Bitcoin transactions

Bitcoin

Researchers from North Carolina State University, Boston University and George Mason University have developed a Bitcoin-compatible system that could make it significantly more difficult for observers to identify or track the parties involved in any given Bitcoin transaction.

Bitcoin was initially conceived as a way for people to exchange money anonymously. But then it was discovered that anyone could track all Bitcoin transactions and often identify the parties involved.

Bitcoin operates by giving each user a unique public key, which is a string of numbers. Users can transmit money in the form of digital bitcoins from one to another. This is made possible by a system that ensures a user has enough bitcoins in his or her account to make the transfer. The use of the public keys gave users a sense of anonymity, even though all of the transactions were visible on the public Bitcoin blockchain which lists all transactions. Over time, experts and private companies have developed highly effective methods of de-anonymizing those public keys.

Now researchers have developed a system called TumbleBit, which is a computer protocol that runs on top of Bitcoin.

TumbleBit takes advantage of an existing concept called "mixing service." The idea works like this: instead of Party A paying Party B directly, many different Parties A pay an intermdiary "tumbler," which then pays the Parties B. The more parties are involved, the harder it is to determine which Party A paid which Party B.

"However, this still has a security flaw," says Alessandra Scafuro, an assistant professor of computer science at NC State and co-author of a paper describing TumbleBit. "Namely, if an outside observer can compromise the tumbler, it could figure out who was paying whom."

To address this, TumbleBit takes a three-phased approach.

In the first phase, called escrow, the Parties A notify the tumbler that they would like to make a payment, and the Parties B notify the tumbler that they would like to be paid. This is all done on the public blockchain.

For the second phase, the researchers have put cryptographic tools into place that allow the tumbler to pay the correct parties without actually knowing which parties are involved. Phase two does not appear on the blockchain.

In the third phase, called cashout, all of the transactions are conducted simultaneously, making it more difficult to identify which parties are involved in any specific transaction. Phase three does appear in the public blockchain.

"We tested TumbleBit with 800 Bitcoin users, and found that the second phase only took seconds to complete," Scafuro says.

"One limitation of TumbleBit is that, right now, the system is designed to work with a fixed denomination - so paying amounts larger than that denomination require making multiple payments," Scafuro says. "That's something we're working on."

The paper, "TumbleBit: An Untrusted Bitcoin-Compatible Anonymous Payment Hub," will be presented at the Network and Distributed System Security Symposium, being held Feb. 26 to March 1 in San Diego, Calif.


Explore further

Finally, interesting uses for the blockchain that go beyond bitcoin

More information: "TumbleBit: An Untrusted Bitcoin-Compatible Anonymous Payment Hub," DOI: 10.14722/ndss.2017.23086
Citation: New system makes it harder to track Bitcoin transactions (2017, February 8) retrieved 26 April 2019 from https://phys.org/news/2017-02-harder-track-bitcoin-transactions.html
This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no part may be reproduced without the written permission. The content is provided for information purposes only.
487 shares

Feedback to editors

User comments

Feb 08, 2017
Can't you still collect the inputs and outputs of the tumbler (both of which are on the blockchain) and run a correlation analysis? While this will not get you an immediate match between party A and Party B repeated payment activity will eventually lead to an association probability with high confidence.

(The upside is that it will still hide individual payments - so at least that part is anonymized)

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more