Ao Liu , Jing Chen , Shixiong Yao , Kun He , Ruiying Du
{"title":"区块链中一个可审计且保护隐私的用户可控组签名方案","authors":"Ao Liu , Jing Chen , Shixiong Yao , Kun He , Ruiying Du","doi":"10.1016/j.jisa.2025.104181","DOIUrl":null,"url":null,"abstract":"<div><div>In recent years, the rapid development of Internet information technology has also brought about numerous challenges, with one of the most prominent being data security. In current information systems, platforms control critical data but rely on centralized architectures. As a result, data usage cannot be effectively monitored, leading to issues such as insecure storage and privacy breaches, which are especially critical in financial transaction systems. In this paper, we propose and implement a group signature model based on user behavior. This model maps privacy preservation levels to users’ transaction amounts, achieving a dynamic and user-perceivable multi-level privacy preservation mechanism. As users’ transaction amounts increase, the privacy preservation level of the group signature gradually enhances, allowing authorized parties to reveal more user privacy information. The proposed scheme achieves a balance between user privacy preservation and regulatory, offering a more flexible solution for modern Internet trading systems. To validate the practicality of this group signature, we developed a blockchain-based knowledge payment platform to address issues of data abuse and data leakage in existing knowledge payment platforms. Security and performance analyses confirm the practicality and effectiveness of the proposed scheme.</div></div>","PeriodicalId":48638,"journal":{"name":"Journal of Information Security and Applications","volume":"93 ","pages":"Article 104181"},"PeriodicalIF":3.7000,"publicationDate":"2025-08-11","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"An auditable and privacy-preserving user-controllable group signature scheme in blockchain\",\"authors\":\"Ao Liu , Jing Chen , Shixiong Yao , Kun He , Ruiying Du\",\"doi\":\"10.1016/j.jisa.2025.104181\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"<div><div>In recent years, the rapid development of Internet information technology has also brought about numerous challenges, with one of the most prominent being data security. In current information systems, platforms control critical data but rely on centralized architectures. As a result, data usage cannot be effectively monitored, leading to issues such as insecure storage and privacy breaches, which are especially critical in financial transaction systems. In this paper, we propose and implement a group signature model based on user behavior. This model maps privacy preservation levels to users’ transaction amounts, achieving a dynamic and user-perceivable multi-level privacy preservation mechanism. As users’ transaction amounts increase, the privacy preservation level of the group signature gradually enhances, allowing authorized parties to reveal more user privacy information. The proposed scheme achieves a balance between user privacy preservation and regulatory, offering a more flexible solution for modern Internet trading systems. To validate the practicality of this group signature, we developed a blockchain-based knowledge payment platform to address issues of data abuse and data leakage in existing knowledge payment platforms. Security and performance analyses confirm the practicality and effectiveness of the proposed scheme.</div></div>\",\"PeriodicalId\":48638,\"journal\":{\"name\":\"Journal of Information Security and Applications\",\"volume\":\"93 \",\"pages\":\"Article 104181\"},\"PeriodicalIF\":3.7000,\"publicationDate\":\"2025-08-11\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"Journal of Information Security and Applications\",\"FirstCategoryId\":\"94\",\"ListUrlMain\":\"https://www.sciencedirect.com/science/article/pii/S2214212625002182\",\"RegionNum\":2,\"RegionCategory\":\"计算机科学\",\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"Q2\",\"JCRName\":\"COMPUTER SCIENCE, INFORMATION SYSTEMS\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"Journal of Information Security and Applications","FirstCategoryId":"94","ListUrlMain":"https://www.sciencedirect.com/science/article/pii/S2214212625002182","RegionNum":2,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q2","JCRName":"COMPUTER SCIENCE, INFORMATION SYSTEMS","Score":null,"Total":0}
An auditable and privacy-preserving user-controllable group signature scheme in blockchain
In recent years, the rapid development of Internet information technology has also brought about numerous challenges, with one of the most prominent being data security. In current information systems, platforms control critical data but rely on centralized architectures. As a result, data usage cannot be effectively monitored, leading to issues such as insecure storage and privacy breaches, which are especially critical in financial transaction systems. In this paper, we propose and implement a group signature model based on user behavior. This model maps privacy preservation levels to users’ transaction amounts, achieving a dynamic and user-perceivable multi-level privacy preservation mechanism. As users’ transaction amounts increase, the privacy preservation level of the group signature gradually enhances, allowing authorized parties to reveal more user privacy information. The proposed scheme achieves a balance between user privacy preservation and regulatory, offering a more flexible solution for modern Internet trading systems. To validate the practicality of this group signature, we developed a blockchain-based knowledge payment platform to address issues of data abuse and data leakage in existing knowledge payment platforms. Security and performance analyses confirm the practicality and effectiveness of the proposed scheme.
期刊介绍:
Journal of Information Security and Applications (JISA) focuses on the original research and practice-driven applications with relevance to information security and applications. JISA provides a common linkage between a vibrant scientific and research community and industry professionals by offering a clear view on modern problems and challenges in information security, as well as identifying promising scientific and "best-practice" solutions. JISA issues offer a balance between original research work and innovative industrial approaches by internationally renowned information security experts and researchers.