一种使用账户抽象的匿名且可问责的合约钱包系统
An Anonymous yet Accountable Contract Wallet System using Account Abstraction
AI总结：
针对区块链合约钱包需平衡匿名性与可问责性的问题，本文结合账户抽象与可问责环签名提出新型合约钱包系统，实现交易发起者匿名与可追责，支持多签名扩展，已在zkSync上实现并可用于医疗、资管等场景。
摘要：
账户抽象允许合约钱包发起交易执行。因此，账户抽象可用于保护外部拥有账户（EOA）的隐私，因为它能消除从EOA发往合约钱包的交易，还可通过额外采用环签名等匿名认证流程隐藏交易的发起者身份。然而，无条件匿名在实际中并不可取，因为当问题出现时，它会阻碍追责对象的查明。因此，在匿名性和可问责性之间保持平衡十分重要。\n 本文提出了一种匿名且可问责的合约钱包系统。除账户抽象外，该系统还采用了可问责环签名（Bootle等人，ESORICS 2015）。所提系统具备两大特性：（1）交易发起者的匿名性，即隐藏谁同意运行合约钱包；（2）发起者的可问责性，即允许发起者证明自己同意运行该合约钱包。此外，基于可问责环签名的安全要求，交易发起者无法声称交易由他人发起。这一功能让我们能够明确交易发起环节的问责关系。另外，该系统允许发起者将ECDSA等典型签名方案与环签名方案结合使用。这一功能可视为常见多签名机制的扩展——这类多签名需要一定数量的ECDSA签名才能运行合约钱包。我们使用zkSync（Solidity）实现了所提系统，并探讨了该系统的若干潜在应用场景，即医疗信息共享和资产管理。
英文摘要：
Account abstraction allows a contract wallet to initiate transaction execution. Thus, account abstraction is useful for preserving the privacy of externally owned accounts (EOAs) because it can remove a transaction issued from an EOA to the contract wallet and hides who issued the transaction by additionally employing anonymous authentication procedures such as ring signatures. However, unconditional anonymity is undesirable in practice because it prevents to reveal who is accountable for a problem when it arises. Thus, maintaining a balancing between anonymity and accountability is important. In this paper, we propose an anonymous yet accountable contract wallet system. In addition to account abstraction, the proposed system also utilizes accountable ring signatures (Bootle et al., ESORICS 2015). The proposed system provides (1) anonymity of a transaction issuer that hides who agreed with running the contract wallet, and (2) accountability of the issuer, which allows the issuer to prove they agreed with running the contract wallet. Moreover, due to a security requirement of accountable ring signatures, the transaction issuer cannot claim that someone else issued the transaction. This functionality allows us to clarify the accountability involved in issuing a transaction. In addition, the proposed system allows an issuer to employ a typical signature scheme, e.g., ECDSA, together with the ring signature scheme. This functionality can be considered an extension of the common multi-signatures that require a certain number of ECDSA signatures to run a contract wallet. The proposed system was implemented using zkSync (Solidity). We discuss several potential applications of the proposed system, i.e., medical information sharing and asset management.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
