분산형 네트워크 환경하에서 암호자산 거래의 추적 곤란성과 익명성 확보 방법
How to Secure the Difficulty of Tracing and Anonymity of Cryptoasset Transactions in a Decentralized Network Environment
0
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
암호자산에 관한 기술은 아직 발전 중이고 익명성을 강화하기 위한 새로운 시스템 또한 출현할 것으로 보이며 앞으로도 주목해야 할 것이다. 한편으로는 암호자산 및 그 이용자의 특정과 추적성도 중요하다. 비합법적인 거래결제, 자금세탁, 탈세 등 암호자산의 부정목적 이용의 다발이나 암호자산에 의한 자산이전 거래의 제3자 기관에 의한 감사 곤란성 등이 암호자산의 활용에 장애가 되고 있기 때문이다. 비트코인을 비롯한 암호자산에서는 블록체인 상에 모든 거래정보가 기록되어 어떤 거래 당사자가 아니더라도 거래추적을 할 수 있겠지만 거래 당사자인 실제 개인과 조직까지 파악하기는 어렵다. 무엇보다 최근에는 암호자산의 거래에 부수되는 정보를 이용하여 거래 당사자를 어느 정도 좁힐 수 있다는 연구성과가 보이는 한편, 거래의 추적 곤란성을 높이는 새로운 방법도 제안되고 있다. 고객확인 등 법적 요청에 부응하기 위해 암호자산 이용자의 특정과 거래의 추적을 위한 구조도 검토되고 있지만, 이제 막 시작한 상황이다. 향후 암호자산의 특정과 거래의 추적을 검토할 때는 수사기관이나 징세기관에 대한 이용자의 협력 하에 혹은 이용자 주도로의 대장정보 공개에 의한 암호자산의 특정과 추적 또는 이용자의 협력을 얻을 수 없는 징세기관이나 수사기관에 의한 강제적인 암호자산 이용자의 특정 및 추적으로 나누어 검토할 필요가 있다. 인터넷 사회에서 안심하고 사용할 수 있는 안전한 암호자산을 실현하기 위해서는 이를 위한 암호자산에 요구되는 요건, 그 요건 실현을 위한 시스템 등 향후 추가적인 연구개발이 필요할 것이다. 각각의 암호자산의 특성을 정확하게 이해하는 데 있어서, 거래의 추적 곤란성과 익명성에 대한 파악이 점점 더 중요해 지고 있다고 할 수 있다. 세계 각국에서는 거래자 실명확인, 트레블룰(travel rule) 및 ISMS 보안기준 강화 등 대책을 강구하고 있다. 이러한 문제의식 하에 본 논문은 암호자산 거래의 추적 곤란성과 익명성에 대한 최근의 연구 동향을 소개한다.
Abstract
The technology related to cryptographic assets is still in development, and new systems to enhance anonymity are also expected to appear, which should be noted in the future. On the other hand, the specificity and traceability of cryptographic assets/users are also important. This is because the frequent use of cryptographic assets for illegal purposes such as illegal transaction settlement, money laundering, and tax evasion, and the difficulty of auditing by third-party organizations for asset transfer transactions using cryptographic assets are obstacles to the use of cryptographic assets. In cryptographic assets, including Bitcoin, all transaction information is recorded on the block chain, so it is possible to track the transaction even if it is not a transaction party, but it is difficult to identify the actual individuals and organizations that are the transaction parties. Above all, recent research results show that the transaction parties can be narrowed to some extent by using information incidental to the transaction of cryptographic assets, while a new method to increase the difficulty of tracking the transaction is also proposed. In order to respond to legal requests such as know your client, a structure for identification of crypto-asset users and tracking of transactions is being considered, but it is only just beginning. When examining the identification of cryptographic assets and tracking of transactions in the future, the tax collection agency that cannot obtain the identification and tracking of cryptographic assets or the cooperation of users under the cooperation of the users with investigation agencies or tax collection agencies or through the disclosure of ledger information led by users However, it is necessary to review by dividing the identification and tracking of users of cryptographic assets forcibly by investigative agencies. In order to realize safe cryptographic assets that can be used safely in the Internet society, additional research and development will be needed in the future, such as the requirements for cryptographic assets and a system for realizing those requirements. In order to accurately understand the characteristics of each cryptographic asset, it can be said that it is increasingly important to understand the difficulty of tracking transactions and anonymity. Countries around the world are taking countermeasures such as real-name verification of traders, travel rules, and strengthening of ISMS security standards. With this in mind, this paper introduces recent research trends on the difficulty of tracking and anonymity of cryptocurrency transactions.
참고문헌 (34)
- 김종호, "암호화폐 비트코인 프로그램 코드의 법적 성질과 그 법적 평가", 지급결제학회지, 12(1), pp.117~155 (2020), 한국지급결제학회[DOI]
- 유지연, "가상자산 범죄에 있어서 자산 동결 제도 도입 제안", 형사법의 신동향, (75), pp.88~116 (2022), 대검찰청[DOI]
- 지무현, "테러수단으로서 가상자산 디지털포렌식 분야의 법적·제도적 개선방향 연구", 한국치안행정논집, 18(3), pp.221~240 (2021), 한국치안행정학회
- 佐藤哲平, "コインチェック事件における流出NEM の追跡に関する実態調査", 信学技報, 118(30), pp.35~41 (2018), 電子情報通信学会
- 長沼健, "2017年暗号と情報セキュリティシンポジウム発表論文" (2017), 電子情報通信学会
- ビットコインのミキシングにおける資金移動の分析, "廣澤龍典", 情報処理学会, ~, pp.情報処理学会研究報告 2018-CSEC-81(9) (2018)
- 松尾真一郎, "ブロックチェーン技術の未解決問題" (2018), 日経BP社
- Alex Biryukov, "Deanonymisation of Clients in Bitcoin P2P Network", Proceedings of ACM SIGSAC Conference on Computer and Communications Security (CCS) 2014, Association for Computing Machinery, pp.15~29 (2014)
- Alex Biryukov, "Bitcoin over Tor Isn’t a Good Idea", Proceedings of IEEE Symposium on Security and Privacy (SP) 2015, pp.122~134 (2015), IEEE
- Amrit Kumar, "A Traceability Analysis of Monero’s Blockchain", Proceedings of European Symposium on Research in Computer Security (ESORICS) 2017, Part 2, Lecture Notes in Computer Science, pp.153~173 (2017), Springer-Verlag
- Daniel Genkin, "Privacy in Decentralized Cryptocurrencies", Communications of the ACM, 61(6), pp.78~88 (2018), Association for Computing Machinery
- Dorit Ron, "Quantitative Analysis of the Full Bitcoin Transaction Graph", Proceedings of International Conference on Financial Cryptography and Data Security (FC) 2013, Lecture Notes in Computer Science, pp.6~24 (2013), Springer-Verlag
- Eiichiro Fujisaki, "Traceable Ring Signature", Proceedings of International Workshop on Public Key Cryptography (PKC) 2007, Lecture Notes in Computer Science, pp.181~200 (2007), Springer-Verlag
- Eli Ben-Sasson, "Zerocash: Decentralized Anonymous Payments from Bitcoin", Proceedings of IEEE Symposium on Security and Privacy (SP) 2014, pp.459~474 (2014), IEEE
- Elli Androulaki, "Evaluating User Privacy in Bitcoin", Proceedings of International Conference on Financial Cryptography and Data Security (FC) 2013, Lecture Notes in Computer Science, pp.34~51 (2013), Springer-Verlag
- Ethan Heilman, "Tumble Bit: An Untrusted Bitcoin-Compatible Anonymous Payment Hub", Report at Network and Distributed System Security Symposium (NDSS) 2017 (2017), Internet Society
- Fergal Reid, "Security and Privacy in Social Networks", pp.197~223 (2012), Springer-Verlag
- Crypto-Assets: Report to the G20 on Work by the FSB and Standard-Setting Bodies, "Financial Stability Board", Financial Stability Board, ~ (2018)
- George Kappos, "An Empirical Analysis of Anonymity in Zcash", Proceedings of USENIX Security Symposium 2018, Advanced Computing Systems Association, pp.463~477 (2018)
- Giannis Tziakouris, "Cryptocurrencies—A Forensic Challenge or Opportunity for Law Enforcement? An INTERPOL Perspective", IEEE Security & Privacy, 16(4), pp.92~94 (2018), IEEE
- Ian Miers, "Zerocoin: Anonymous Distributed E-Cash from Bitcoin", Proceedings of IEEE Symposium on Security and Privacy (SP) 2013, pp.397~414 (2013), IEEE
- Jan Henrik Ziegeldorf, "Coin Party: Secure Multi-Party Mixing of Bitcoins", Proceedings of ACM Conference on Data and Application Security and Privacy (CODASPY) 2015, Association for Computing Machinery, pp.75~86 (2015)
- Merve Can, "A Survey on Anonymity and Privacy in Bitcoin-Like Digital Cash Systems", IEEE Communications Surveys & Tutorials, 20(3), pp.2543~2585 (2018), IEEE
- "CryptoNote v 2.0" (2013)[URL]
- Pedro Moreno-Sanchez, "Listening to Whispers of Ripple: Linking Wallets and Deanonymizing Transactions in the Ripple Network", Proceedings on Privacy Enhancing Technologies, 2016(4), pp.436~453 (2016), De Gruyter
- Compromising Tor Anonymity Exploiting P2P Information Leakage, "Pere Manils", Institut National de Recherche en Informatique et Automatique, ~ (2010)
- Philip Koshy, "An Analysis of Anonymity in Bitcoin Using P2P Network Traffic", Proceedings of International Conference on Financial Cryptography and Data Security (FC) 2014, Lecture Notes in Computer Science, pp.469~485 (2014), Springer-Verlag
- Roger Dingledine, "Tor: The Second-Generation Onion Router", Proceedings of Conference on USENIX Security Symposium (SSYM) 2004 (2004), Advanced Computing Systems Association
- Ryan Henry, "Blockchain Access Privacy: Challenges and Directions", IEEE Security and Privacy, 16(4), pp.38~45 (2018), IEEE
- Sarah, Meikle John, "A Fistful of Bitcoins: Characterizing Payments among Men with No Names", Proceedings of Conference on Internet Measurement Conference (IMC) 2013, Association for Computing Machinery, pp.127~140 (2013)
- Shen Noether, "Ring Confidential Transactions", pp.1~18 (2016), University of Pittsburgh
- Steven Goldfeder, "When the Cookie Meets the Blockchain: Privacy Risks of Web Payments via Cryptocurrencies", Proceedings on Privacy Enhancing Technologies, 2018(4), pp.179~199 (2018), De Gruyter
- Tim Ruffing, "Coin Shuffle: Practical Decentralized Coin Mixing for Bitcoin", Proceedings of European Symposium on Research in Computer Security (ESORICS) 2014, Part 2, Lecture Notes in Computer Science, pp.345~364 (2014), Springer-Verlag
- Tim Ruffing, "P2P Mixing and Unlinkable Bitcoin Transactions", Report at Network and Distributed System Security Symposium (NDSS) 2017 (2017), Internet Society