Anonymous and Verifiable Reputation System for E-commerce Platforms based on Blockchain

Anonymous and Verifiable Reputation System for E-commerce Platforms based on Blockchain

Li, Meng (Hefei University of Technology)
Zhu, Liehuang (Beijing Institute of Technology)
Zhang, Zijian (Beijing Institute of Technology; The University of Auckland)
Lal, C. (TU Delft Cyber Security)
Conti, M. (TU Delft Cyber Security; University of Padua)
Alazab, Mamoun (Charles Darwin University)

2021

E-commerce platforms incorporate reputation systems that allow customers to rate suppliers following financial transactions. Existing reputation systems cannot defend the centralized server against arbitrarily tampering with the supplier’s reputation. Furthermore, they do not offer reputation access across platforms. Rates are faced with privacy leakages because rating activities are correlated with privacy (e.g., identity and rating). Meanwhile, raters could be malicious and initiate multiple rating attacks and abnormal rating attacks. Determining how to address these issues have both research and practical value. In this paper, we propose a blockchain-based privacy-preserving reputation system for e-commerce platforms named RepChain; our system allows cross-platform reputation access and anonymous and private ratings. Using RepChain, all e-commerce platforms collaborate and share users’ reputations by co-constructing a consortium blockchain and modeling the rating process as a finite state machine. In particular, we facilitate one-show anonymous credentials constructed from two-move blind signatures to protect customers’ identities and resist multiple rating attacks, leverage zero-knowledge range proof to verify the correctness of ratings and defend against abnormal rating attacks, design a secure sum computation protocol among nodes to update reputations, and verify ratings via batch processing and consensus hashes. Finally, we demonstrate the security and privacy of RepChain via a formal analysis and evaluate its performance based on Ethereum test network.

Blockchain
E-commerce platforms
Privacy
Rating
Security

http://resolver.tudelft.nl/uuid:8d910b72-a1b5-4202-98a1-a74bbe2b4e34

https://doi.org/10.1109/TNSM.2021.3098439

2022-04-04

1932-4537

IEEE Transactions on Network and Service Management, 18 (4), 4434-4449

Green Open Access added to TU Delft Institutional Repository ‘You share, we take care!’ – Taverne project https://www.openaccess.nl/en/you-share-we-take-care Otherwise as indicated in the copyright section: the publisher is the copyright holder of this work and the author uses the Dutch legislation to make this work public.

Institutional Repository

journal article

© 2021 Meng Li, Liehuang Zhu, Zijian Zhang, C. Lal, M. Conti, Mamoun Alazab