Astraea: Anonymous and Secure Auditing Based on Private Smart Contracts for Donation Systems

Meng Li, Yifei Chen, Liehaung Zhu*, Zijian Zhang*, Jianbing Ni, Chhagan Lal, Mauro Conti

*Corresponding author for this work

Research output: Contribution to journalArticlepeer-review

7 Citations (Scopus)

Abstract

Many regions are in urgent need of facial masks for slowing down the spread of COVID-19. To fight the pandemic, people are contributing masks through donation systems. Most existing systems are built on a centralized architecture which is prone to the single point of failure and lack of transparency. Blockchain-based solutions neglect fundamental privacy concerns (donation privacy) and security attacks (collusion attack, stealing attack). Moreover, current auditing solutions are not designed to achieve donation privacy, thus not appropriate in our context. In this work, we design a decentralized, anonymous, and secure auditing framework Astraea based on private smart contracts for donation systems. Specifically, we integrate a Distribute Smart Contract (DiSC) with an SGX Enclave to distribute donations, prove the integrity of donation number (intention) and donation sum while preserving donation privacy. With DiSC, we design a Donation Smart Contract to refund deposits and defend against the stealing attack the collusion attack from malicious collector and transponder. We formally define and prove the privacy and security of Astraea by using security reduction. We build a prototype of Astraea to conduct extensive performance analysis. Experimental results demonstrate that Astraea is practically efficient in terms of both computation and communication.

Original languageEnglish
Pages (from-to)3002-3018
Number of pages17
JournalIEEE Transactions on Dependable and Secure Computing
Volume20
Issue number4
DOIs
Publication statusPublished - 1 Jul 2023

Keywords

  • Donation systems
  • auditing
  • commitment
  • donation privacy
  • private smart contract
  • security

Fingerprint

Dive into the research topics of 'Astraea: Anonymous and Secure Auditing Based on Private Smart Contracts for Donation Systems'. Together they form a unique fingerprint.

Cite this