Design of Secure Sharing Scheme Based on Smart Contracts: Case Study on Home Sharing

建構具安全性的智慧合約共享方案－以房屋共享為例

蘇品長(Pin-Chang Su)；夏君和(Jyun-He Xia)；蘇泰昌(Tai-Chang Su)

Home Sharing ； Smart Contracts ； Self-certification ； Blind Signing ； 房屋共享 ； 智能合約 ； 自我認證 ； 盲簽密

資訊管理學報

29卷3期（2022 / 07 / 31）

253 - 275

英文

The sharing economy is a system in which fixed resources are shared to increase their utility, and has disrupted a number of consumer markets for both enterprises and individuals. However, because payments for services on a sharing economy platform are usually conducted by banks and trusted third parties, these third-party platforms may become a single point of failure or compromise user privacy. In a previous study, a privacy mechanism that disrupts the contact between users and asset owners was proposed, which ensures fairness between the participants of a transaction. However, it does not use the automation provided by smart contracts in the design of conditionally triggered transactional agreements for each phase of a sharing-economy transaction (i.e., the initialization, registration, matching, and transaction phases), which would further enhance the transactional security and user privacy. To address this shortcoming, we designed a smart contract-based home sharing scheme. The features of this scheme are as follows: (1) A self-certification mechanism is used to enhance the level of security. (2) Contract functions are used to automatically resolve transactional conflicts and minimize the participation from third parties. (3) Blind signing is used in the transaction stage to preserve the confidentiality of personal information, and thus ensure the privacy of the transaction.

共享經濟是透過分享的方式使閒置資源的運用更為便利，顛覆了許多企業與個人的消費模式。惟現行共享經濟平台藉由銀行及可信任第三方進行支付，衍生出許多問題，例如可信任的第三方平台單點故障及缺乏用戶隱私等。以往研究中曾提出透過打破使用者與財產擁有者之間的聯繫來保護隱私，而且確保參與交易的各方之間的公平性，惟未結合智慧合約的自動化流程管理，設計從部署至交易過程條件觸發之交易協定，進一步提升交易之安全性及使用者之隱私性。因此，本研究之目的，在於設計一套基於智慧合約的房屋共享方案。其具體貢獻包括：（1）藉由自我認證機制來強化安全性。（2）透過合約函式自動解決交易衝突，以降低第三方之參與。（3）於交易階段使用盲簽密技術強化個人資訊保密，以保障交易隱私性。

1. Tung W. F.,Chiu Y. F.(2019).Transnational sentiment analysis of social media for CSA social enterprise innovation - from the perspective of sharing economy and collaborative consumption.Journal of Information Management,26(1),71-98.
   連結：
2. Airbnb. (2020). https://www.airbnb.com
3. Asokan, N.(1998).University of Waterloo.
4. Botsman, R.,Rogers, R.(2010).What's mine is yours: The rise of collaborative consumption.Harper Business.
5. Chaum, D.(Ed.)(1984).Advances in Cryptology.Boston, MA:Springer.
6. Chen, Y. L.(2018).Tunghai University Computer Science Department.
7. Chiu, S. F.(2014).Disruption by the sharing economy: The construction of new service models.Taiwan Economic Research Monthly,37(8),18-24.
8. Constantiou, I.,Marton, A.,Tuunainen, V. K.(2017).Four models of sharing economy platforms.MIS Quarterly Executive,16(4),231-251.
9. Fan, M.,Zhang, X.(2019).Consortium blockchain based data aggregation and regulation mechanism for smart grid.IEEE Access,7,35929-35940.
10. Fromknecht, C., Velicanu, D., & Yakoubov, S. (2014). A decentralized public key Infrastructure with identity retention, https://allquantor.at/blockchainbib/pdf/fromknecht2014decentralized.pdf
11. Girault, M.(1991).Self-certified public keys.Advances in Cryptology–EUROCRYPT 1991,Berlin, Heidelberg:
12. Hang, L.,Kim, D. H.(2019).SLA-based sharing economy service with smart contract for resource integrity in the Internet of Things.Applied Sciences,9(17),3602.
13. ISO(2005).ISO. (2005). Information technology-security techniques. Code of Practice for Information Security Management, ISO/IEC 17799..
14. Karamitsos, I.,Maria, P.,Al Barghuthi, N. B.(2018).Design of the blockchain smart contract: A use case for real estate.Journal of Information Security,9(3),177-190.
15. Lai, C. H.(2003).Department of Computer Science and Information Engineering, Tamkang University.
16. Lee, J. Y.(2019).A decentralized token economy: How blockchain and cryptocurrency can revolutionize business.Business Horizons,62(6),773-784.
17. Lesavre, L.,Varin, P.,Yaga, D.(2021).Blockchain networks: Token design and management overview.NIST Internal or Interagency Report,8301
18. Li, B.,Wang, Y.,Shi, P.,Chen, H.,Cheng, L.(2018).FPPB: A fast and privacy-preserving method based on the permissioned blockchain for fair transactions in sharing economy.IEEE International Conference on Trust
19. Liu, Z.,Li, Y.,Liu, Y.,Yuan, D.(2018).Sharing economy protocol with privacy preservation and fairness based on blockchain I.International Conference on Cloud Computing and Security
20. Nakamoto, S.(2008).Bitcoin: A peer-to-peer electronic cash system.Decentralized Business Review,21260.
21. Niya, S. R.,Schüpfer, F.,Bocek, T.,Stiller, B.(2018).A Peer-to-peer Purchase and Rental Smart Contract-based Application (PuRSCA).it-Information Technology,60(5-6),307-320.
22. OWASP. (2017). Category: OWASP top ten project, https://owasp.org/www-project-top-ten/
23. Pfitzmann, A.,Köhntopp, M.(2001).Anonymity, unobservability, and pseudonymity–A proposal for terminology.Designing Privacy Enhancing Technologies: Proceedings of the International Workshop on the Design Issues in Anonymity and Observability
24. Risius, M.,Spohrer, K.(2017).A blockchain research framework.Business and Information Systems Engineering,59(6),385-409.
25. Szabo, N. (1994). Smart contracts, http://www.fon.hum.uva.nl/rob/Courses/InformationInSpeech/CDROM/Literature/LOTwinterschool2006/szabo.best.vwh.net/smart.contracts.html
26. Yaga, D.,Mell, P.,Roby, N.,Scarfone, K.(2019).,未出版
27. Yu, T.Y.(2020).Department of Information Research, National Defense University.
28. Yuan, Y.,Wang, F. Y.(2016).Blockchain: The state of the art and future trends.Acta Automatica Sinica,42(4),481-494.
29. Zheng, Y.(1997).Digital signcryption or how to achieve cost.Advances in Cryptology-Crypto,97(1294),165-179.
30. 王文宇(2018)。從共享經濟論 Airbnb 管制爭議。會計研究月刊，394，46-51。
31. 沈淑惠(2014)。第三方支付研究。商學學報，22，21-40。

1. (2024)。電腦資料交換之實體隔離機制探討－植基於身分驗證之USB存取管控研究。資訊管理學報，31(1)，93-121。