System and method for information protection

1. A computer-implemented method for information protection and storage reduction, comprising:

receiving, by a recipient node of a recipient of a transaction from a sender node of a sender of the transaction via an off-blockchain channel, (i) a combination of a transaction blinding factor r_t and a transaction amount t in an encryption form based on a second public key PK_ 2 _B of the recipient and (ii) a transaction commitment value T, wherein: the transaction commitment value T is a commitment form of the transaction amount t based on a commitment scheme of the sender node of the sender of the transaction, the commitment scheme comprising at least the transaction blinding factor r_t;

obtaining, by the recipient node, the transaction blinding factor r_t and the transaction amount t by decrypting the obtained combination with a second private key SK_ 2 _B of the recipient of the transaction, wherein the second public key PK_ 2 _B and the second private key SK_ 2 _B are a public-private key pair of the recipient;

determining, by the recipient node, whether the transaction commitment value T matches a commitment output of the commitment scheme of the transaction amount t based on the transaction blinding factor r_t;

based on a determination that the transaction commitment value T matches the commitment output of the commitment scheme of the transaction amount t based on the transaction blinding factor r_t, generating, by the recipient node, a recipient signature SIGB by signing the transaction with a first private key SK_ 1 _B of the recipient, wherein the recipient signature SIGB represents the recipient's approval of the transaction;

transmitting, by the recipient node, the recipient signature SIGB to the sender node;

submitting, by the sender node, a blockchain transaction comprising the combination in the encryption form, the transaction commitment value T, a sender signature SIGA, and the recipient signature SIGB, wherein the sender signature SIGA represents the sender's approval of the transaction;

receiving, by a plurality of blockchain nodes of a blockchain network from the sender node, the blockchain transaction;

performing, by the plurality of blockchain nodes, verification on the blockchain transaction via the blockchain network;

determining, by the plurality of blockchain nodes, a consensus based on the verification; and

based on the consensus, storing, by the plurality of blockchain nodes, the blockchain transaction to a blockchain.

2. The method of claim 1 , wherein: the second public key PK_ 2 _B of the recipient and the second private key SK_ 2 _B of the recipient are a homomorphic encryption key pair.

3. The method of claim 1 , wherein: the commitment scheme comprises a Pedersen commitment based at least on the transaction blinding factor r_t.

4. The method of claim 1 , wherein: the combination of the transaction blinding factor r_t and the transaction amount t comprises a concatenation of the transaction blinding factor r_t and the transaction amount t.

5. The method of claim 1 , wherein submitting, by the sender node, the blockchain transaction comprises:

verifying, by the sender node, the recipient signature SIGB; and

in response to successfully verifying the recipient signature SIGB, generating, by the sender node, the sender signature SIGA by signing the transaction with a private key SK_ 1 _A of the sender.

6. The method of claim 5 , wherein the blockchain transaction further comprises:

a combination of a change blinding factor r_y and a change y in an encryption form based on a second public key PK_ 2 _A of the sender, and a change commitment value Y, wherein the change commitment value Y is a commitment form of the change y of the transaction based on the commitment scheme.

7. A plurality of non-transitory computer-readable storage media storing instructions that, when executed by a plurality of processors, cause the plurality of processors to perform operations comprising:

receiving, from a sender node of a sender of a transaction via an off-blockchain channel, (i) a combination of a transaction blinding factor r_t and a transaction amount t in an encryption form based on a second public key PK_ 2 _B of a recipient of the transaction, and (ii) a transaction commitment value T, wherein: the transaction commitment value T is a commitment form of the transaction amount t based on a commitment scheme of the sender node of the sender of the transaction, the commitment scheme comprising at least the transaction blinding factor r_t;

obtaining the transaction blinding factor r_t and the transaction amount t by decrypting the obtained combination with a second private key SK_ 2 _B of the recipient of the transaction, wherein the second public key PK_ 2 _B and the second private key SK_ 2 _B are a public-private key pair of the recipient;

determining whether the transaction commitment value T matches a commitment output of the commitment scheme of the transaction amount t based on the transaction blinding factor r_t;

based on a determination that the transaction commitment value T matches the commitment output of the commitment scheme of the transaction amount t based on the transaction blinding factor r_t, generating a recipient signature SIGB by signing the transaction with a first private key SK_ 1 _B of the recipient, wherein the recipient signature SIGB represents the recipient's approval of the transaction;

transmitting the recipient signature SIGB to the sender node;

submitting a blockchain transaction comprising the combination in the encryption form, the transaction commitment value T, a sender signature SIGA, and the recipient signature SIGB, wherein the sender signature SIGA represents the sender's approval of the transaction;

receiving, from the sender node, the blockchain transaction;

performing verification on the blockchain transaction via a blockchain network;

determining a consensus based on the verification; and

based on the consensus, storing the blockchain transaction to a blockchain.

8. The storage media of claim 7 , wherein: the second public key PK_ 2 _B of the recipient and the second private key SK_ 2 _B of the recipient are a homomorphic encryption key pair.

9. The storage media of claim 7 , wherein: the commitment scheme comprises a Pedersen commitment based at least on the transaction blinding factor r_t.

10. The storage media of claim 7 , wherein: the combination of the transaction blinding factor r_t and the transaction amount t comprises a concatenation of the transaction blinding factor r_t and the transaction amount t.

11. The storage media of claim 7 , wherein submitting the blockchain transaction comprises:

verifying the recipient signature SIGB;

in response to successfully verifying the recipient signature SIGB, generating the sender signature SIGA by signing the transaction with a private key SK_ 1 _A of the sender.

12. The storage media of claim 11 , wherein the blockchain transaction further comprises:

a combination of a change blinding factor r_y and a change y in an encryption form based on a second public key PK_ 2 _A of the sender, and a change commitment value Y, wherein the change commitment value Y is a commitment form of the change y of the transaction based on the commitment scheme.

13. A system for information protection, comprising:

a recipient node comprising: (i) a recipient node processor and (ii) a recipient node non-transitory memory storing first computer-readable instructions that, when executed by the recipient node processor, cause the recipient node processor to perform operations comprising:

receiving, from a sender node of a sender of a transaction via an off-blockchain channel, (i) a combination of a transaction blinding factor r_t and a transaction amount t in an encryption form based on a second public key PK_ 2 _B of a recipient of the transaction, and (ii) a transaction commitment value T, wherein: the transaction commitment value T is a commitment form of the transaction amount t based on a commitment scheme of the sender node of the sender of the transaction, the commitment scheme comprising at least the transaction blinding factor r_t;

obtaining the transaction blinding factor r_t and the transaction amount t by decrypting the obtained combination with a second private key SK_ 2 _B of the recipient of the transaction, wherein the second public key PK_ 2 _B and the second private key SK_ 2 _B are a public-private key pair of the recipient;

determining whether the transaction commitment value T matches a commitment output of the commitment scheme of the transaction amount t based on the transaction blinding factor r_t;

based on a determination that the transaction commitment value T matches the commitment output of the commitment scheme of the transaction amount t based on the transaction blinding factor r_t, generating a recipient signature SIGB by signing the transaction with a first private key SK_ 1 _B of the recipient, wherein the recipient signature SIGB represents the recipient's approval of the transaction; and

transmitting the recipient signature SIGB to the sender node;

a sender node comprising: (i) a sender node processor and (ii) a sender node non-transitory memory storing second computer-readable instructions that, when executed by the sender node processor, cause the sender node processor to perform operations comprising: submitting a blockchain transaction comprising the combination in the encryption form, the transaction commitment value T, a sender signature SIGA, and the recipient signature SIGB, wherein the sender signature SIGA represents the sender's approval of the transaction; and

one or more blockchain nodes comprising (i) one or more blockchain node processors and (ii) one or more blockchain node non-transitory memories storing third computer-readable instructions that, when executed by the one or more blockchain node processors, cause the one or more blockchain node processors to perform operations comprising:

receiving, from the sender node, the blockchain transaction;

performing verification on the blockchain transaction via a blockchain network;

determining a consensus based on the verification; and

based on the consensus, storing the blockchain transaction to a blockchain.

14. The system of claim 13 , wherein: the second public key PK_ 2 _B of the recipient and the second private key SK_ 2 _B of the recipient are a homomorphic encryption key pair.

15. The system of claim 13 , wherein: the commitment scheme comprises a Pedersen commitment based at least on the transaction blinding factor r_t.

16. The system of claim 13 , wherein: the combination of the transaction blinding factor r_t and the transaction amount t comprises a concatenation of the transaction blinding factor r_t and the transaction amount t.

17. The system of claim 13 , wherein submitting the blockchain transaction comprises:

verifying the recipient signature SIGB;

in response to successfully verifying the recipient signature SIGB, generating the sender signature SIGA by signing the transaction with a private key SK_ 1 _A of the sender.