Privacy preservation in permissionless blockchain: A survey

Li Peng,Wei Feng,Zheng Yan,Yafeng Li,Xiaokang Zhou,Shohei Shimizu

DOI: https://doi.org/10.1016/j.dcan.2020.05.008

IF: 6.348

2021-08-01

Digital Communications and Networks

Abstract:Permissionless blockchain, as a distributed ledger, has gained considerable attention owing to its openness, transparency, decentralization, and immutability. Currently, permissionless blockchain has shown a good application prospect in many fields, from the initial cryptocurrency to the Internet of Things (IoT) and Vehicular Ad-Hoc Networking (VANET), which is considered as the beginning to rewrite our digital infrastructure. However, blockchain confronts several privacy risks that hinder its practical applications. Though numerous surveys reviewed the privacy preservation in blockchain, they failed to reveal the latest advances or cannot well review researches through comprehensive classification with unified criteria in privacy preservation of permissionless blockchain. Therefore, in this paper, we analyze the specific characteristics of permissionless blockchain, summarize the potential privacy threats to it, and investigate the unique privacy requirements of blockchain. Existing privacy preservation technologies are seriously surveyed and evaluated based on our proposed evaluation criteria. We finally figure out open research issues as well as future research directions from the perspective of privacy issues.

telecommunications

What problem does this paper attempt to address?

### Problems the Paper Attempts to Solve

This paper aims to address the privacy protection issues in permissionless blockchains. Although permissionless blockchains show promising applications in many fields due to their openness, transparency, decentralization, and immutability, some privacy risks severely hinder their practical application. These issues include but are not limited to:

1. **Transaction Privacy**:
- Transactions may contain sensitive user information, and direct exposure on the public ledger may lead to privacy leaks.
- By analyzing the transaction graph, attackers can infer the relationships between transaction addresses and thus deduce the real identities of users, threatening user privacy.

2. **Smart Contract Privacy**:
- Smart contracts require each miner to execute every step, so the contract code and data must be public, making it impossible to protect private information during state transition verification.
- Existing smart contract systems lack data confidentiality, such as auction bids and financial transactions, leading to serious privacy issues.

3. **Privacy Threat Model**:
- **De-anonymization and Tracking**: By analyzing the relationships between transaction inputs and outputs, attackers can reveal users' real identities or track their activities.
- **Transaction Flow Leakage**: Since transactions in the Bitcoin system are public and transparent, attackers can trace transactions and obtain fund flow information by analyzing the correlation of transaction addresses.

### Solutions

To address the above privacy issues, the paper undertakes the following work:

1. **Summarize System Model and Application Scenarios**: It provides a detailed introduction to the system model of permissionless blockchains and their unique characteristics, and analyzes their application scenarios in different fields.
2. **Analyze Privacy Threats**: Based on the system model and characteristics of blockchains, it defines a security model, analyzes privacy issues in blockchains, and summarizes potential privacy threats.
3. **Propose Privacy Protection Requirements**: It proposes a series of requirements for evaluating existing privacy solutions and systematically analyzes existing work from the perspectives of privacy protection and usability.
4. **Evaluate and Compare Privacy Protection Schemes**: According to the proposed evaluation criteria, it evaluates and compares privacy protection schemes published in high-level journals and conferences, summarizing the advantages and disadvantages of each scheme.
5. **Propose Future Research Directions**: It identifies unresolved open research issues and proposes a series of future research directions to guide future privacy protection research.

Through this work, the paper aims to provide a comprehensive survey and analysis of privacy protection research in permissionless blockchains, promoting further development in this field.