AI 中文总结
本文提出一种嵌入协议的合规性方案，基于USO资产模型将合规数据嵌入数字资产状态，实现非托管、隐私保护的合规数字支付，可与传统金融基础设施对接。
AI 中文摘要
关于支付基础设施的普遍共识强烈支持托管型、基于账户的模型，认为这是交易完整性、可审计性和可验证性的必要条件；该观点主张，受监管数字货币交易的基本原语集需要指定可识别实体，这些实体存储和处理凭证、执行KYC（了解你的客户），并最终作为合规补救，尤其是最重要的AML（反洗钱）的“单一真实版本”。在本文中，我们认为情况并非如此，我们主张非托管、类现金的数字资产可以体现这些能力，且安全性可称更高。为此，我们提出了数字价值交换系统的参考架构和核心协议规则，该系统在保留有意义的用户隐私的同时实现了强可审计性。协议定义了数字资产创建、转移和赎回有效的条件。架构规定了这些规则运行所依托的参与者、角色和组件的分配，支持对交易是否符合适用规范进行独立验证。本文基于Goodell等人提出的不可伪造、有状态、无感知（USO）资产模型，将合规性数据作为由独立实体签发的密码学签名证明直接嵌入资产状态。转移仅在满足适用合规谓词且资产状态中包含相应签名时才有效。因此，合规执行在协议层面进行，而非通过机构托管或基于身份的账户控制。我们的结论是，所提出的模型可与现有支付系统成功对接，使非托管、经合规验证的交易能够与传统金融基础设施整合。
英文摘要
Received wisdom on payments infrastructure strongly supports the custodial, account-based model as a necessity for transaction integrity, auditability and verification; the set of fundamental primitives for regulated digital money exchange, the argument goes, necessitates designated identifiable entities that store and process credentials, perform KYC, and ultimately act as the 'single version of the truth' for compliance remediation and, most important, AML. In this paper, we propose this is not the case, by arguing that non-custodial, cash-like digital assets can embody such capabilities, in an arguably more secure manner. To that end, we present a reference architecture and core protocol rules for digital-value-exchange systems that preserve meaningful user privacy while enabling strong auditability. The protocol defines the conditions under which digital asset creation, transfer, and redemption are valid. The architecture specifies the allocation of actors, roles and components through which these rules operate, enabling independent verification of transaction compliance with applicable norms. Building upon the Unforgeable, Stateful, Oblivious (USO) asset model of Goodell et al., regulatory compliance data are embedded directly into the asset state as cryptographically signed attestations issued by independent entities. A transfer is valid only upon satisfaction of applicable compliance predicates and inclusion of the resulting signature within the asset state. Compliance enforcement is thus performed at the protocol level rather than through institutional custody or identity-based account control. We conclude that our proposed model can successfully interface with existing payment systems, making it possible to integrate non-custodial, compliance-verified transactions with legacy financial infrastructure.
Comments32 pages, 4 figures
