Introduction
One of the issues with reputation systems is the fact that the ratings by customers may necessarily have to be private or kept anonymous from the service providers. Achieving this level of privacy through blockchain technology is not trivial but it is possible. In this article I will discuss some of the latest research papers and offer some ideas on the topic.
Can privacy be preserved in a decentralized reputation system?
The answer is yes. In a paper released recently titled: "A trustless privacy preserving reputation system" there is a detailed description of how to create this kind of reputation system on a blockchain. Ideas from this particular research paper can be adopted by Steem, for use in Steemit, and also be used for Graphene.
The paper discusses and provides solutions for problems such as trust, or suitability for e-commerce. As an example here is a pertinent quote:
As the identity of a customer will be most certainly revealed during a transac-tion, the system should enforce the unlinkability of transactions and ratings,i.e. for a given rating, it should not be possible to determine which trans-action it is related to (it should however be possible to identify the relatedSP). It should, however, not be possible for a customer to submit a rating if no transaction took place.
As a priority in the paper their solution seeks to avoid any central points of failure, or and central points of control. This is a similar criteria to what Steemit would need to offer for effective e-commerce to become viable. Another highlight from the paper is the need for ratings to be un-linkable to the customers:
The anonymity of the customers should be preserved. More precisely, the ratings and the identities of the customers should be unlinkable, as well as the ratings among themselves. The later kind of unlinkability is also crucial to preserve the anonymity of the users,
Knowing that the objectives of Steemit e-commerce match the objectives of this research paper, now we can look at some of the solutions offered by the research paper.
Blind signatures
Using blind signatures, a signer of a message can know nothing about the content of the message. This could be particularly useful as a technique to preserve customer privacy in our context. Okamoto or Chaum offer viable blind signature schemes.
Blind token exchange
Steemit will have to offer an equivalent version of the blind token exchange offered by the research paper. I would recommend going with Okamoto's provable blind signature scheme as outlined in the paper, adapted to the purposes of Steem. This would be possible to implement over Steem and is in my opinion necessary.
A quote from the paper says:
Before the transaction takes place, the customer will receive a token from the SP that will guarantee that its review will be accepted. For this purpose, the customer hashes the previously generated public key and requests a blind signa-ture on this, for example using Okamoto’s provable blind signature scheme (in the complete, not partial blinding setup), or the much simpler Chaum’s blind signature algorithm. This will make the token unlinkable to the transaction, and therefore guarantee the anonymity. The customer will also check that there are enough coins in the wallet associated with the SP. Then, the transaction can take place.
Conclusion
This research paper proves that Steemit can offer a privacy preserving reputation system for e-commerce. It can be implemented, even enhanced, and the key technique is the use of Okamoto's blinded signature scheme to preserve customer anonymity. I request that Dan and others take a look at this paper and comment on it if they have any thoughts, or if they have knowledge of this technique already to offer some indication of when we can expect something like this on Steemit.
References
Schaub, A., Bazin, R., Hasan, O., & Brunie, L. (2016, May). A trustless privacy-preserving reputation system. In IFIP International Information Security and Privacy Conference (pp. 398-411). Springer International Publishing.