summaryrefslogtreecommitdiff
path: root/ekrona/e-krona.tex
blob: 499b520e6436a5b50e7e6c572e36edec2167a4c3 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
\documentclass{memoir} % {article} % {acmart}

\usepackage{url}
\usepackage{eurosym}
\usepackage[T1]{fontenc}
% \usepackage{lmodern}
% \usepackage{verbatim}
\usepackage[utf8]{inputenc}
\usepackage{graphicx}
\usepackage[a4paper,left=25mm,right=25mm, top=25mm, bottom=25mm]{geometry}

\makeevenhead{plain}{}{}{\logo}
\makeoddhead{plain}{}{}{\logo}
%\makeevenfoot{plain}{}{}{}
%\makeoddfoot{plain}{}{}{}

\begin{document}
\pagestyle{plain}
% \thispagestyle{empty}

\newcommand\logo{\includegraphics[width=0.07\textwidth]{../presentations/comprehensive/taler-big-accent.pdf}}

\begin{center}
{\huge Taler for e-Krona}

\medskip

% \begin{tabular}{l l}
% Project Acronym 	& LAC - Latent Anonymous Commons  (LAKE) \\
% Principal Investigator	& Jeffrey Burdges \\
% Host Institution	& University of Luxembourg \\
% Main Partner     	& pEp SA \\
% \end{tabular}
\end{center}

\def\red{}  % FIXME


\section*{Introduction}

Taler Systems is developing an online payment system called Taler,
that could easily fit the requirements of the e-Krona project.

Taler is an open source system based on a consumer wallet, merchant
backend and a central exchange for payment processing. It provides
instant one-click payments, implements privacy-by-design and assures
receiver transparency for tax purposes using modern cryptography.  It
is fast and efficient, and can hence also cover micro-payments
(payments of 1 cent) economically.

The USPs of Taler are:

\begin{itemize}
\item All operations provide cryptographically secured, with mathematical
      proofs for courts and auditors
\item Customer payments are privacy-preserving, like cash
\item Merchants are identifiable in each payment they receive
\item Payments are in existing currencies
\item Payment fraud is eliminated, short of catastrophic failure in cryptographic primitives
\item Linear scalability ensures Taler handles transaction volumes of widely used systems
\item Suitable for micro-payments due to very low transaction costs
\item Ease of use (one-click, instant, no authentication during payment, again like cash)
\item Open standard protocol without patents, with free reference implementation
\end{itemize}

The Taler architecture includes a register-based system of bank accounts
for customers and merchants with an escrow-account for the exchange.  The
exchange signs electronic coins into existence, customers use them to sign
contracts and merchants deposit them in return for a credit to the register.
The exchange collects cryptographic proofs that it operates correctly, which
are then checked by an auditor (auditor not shown):

\begin{minipage}{13cm}
\includegraphics[width=\textwidth]{taler-arch-full.pdf}
\end{minipage}
\begin{minipage}{3cm}
  {\Huge \}} register-based
\vspace{3cm}
  
{\Huge \}} value-based 
\end{minipage}


\section*{What would a solution for a register-based e-Krona look like?}

Taler's focus is on a cryptographic protocol for a value-based
transaction system.  However, Taler requires integration with
some register-based accounting system, equivalent to traditional
bank accounts.  For this, it would be possible to use a permissioned
block chain.  Taler aggregates many small transactions from different
customers to the same merchant, thereby reducing the transaction
rate in the register-based solution.

\section*{What would a solution for a value-based e-Krona look like?}

Taler issues electronic coins based on deposits into an escrow
account.  Citizens could use their wallets to withdraw e-Krona
from their traditional bank accounts, or they could be provided
e-Krona directly (for example via social security) if they lack
a bank account.  Electronic coins are blindly signed
by the issuing exchange, which is obliged to exchange e-Krona
back into Krona when they are deposited by merchants.  An auditor
supervises the operation of the exchange.

Our vision is thus very close to the electronic cash system
``DigiCash'' proposed by David Chaum in the 1990s, except that
Taler's design and implementation supports key features such
as giving change, providing refunds, securely handling aborts
and various other practical issues previous technical solutions
lacked.

\section*{What is your vision for an e-Krona?}
% Are there other possible solutions than register-based and value-based that you consider to be more appropriate?}

We imagine a realistic e-Krona solution based on the Taler system to
be effectively a hybrid solution, with a register-based component and
a value based component, in order to fulfill the maximum requirements
outlined in ``The Riksbank’s e-Krona project'' report.

The e-Krona Taler wallet can exist on smartphones, in browsers, on
smartcards or secure USB sticks. It is filled via wire-transfer to the
Taler exchange's escrow account, where the subject identifies the
Taler wallet eligible to withdraw the e-Krona.   Regulators could
limit the amount an entity is entitled to exchange from Krona into
e-Krona, like ATM limits.  When withdrawing electronic coins, they are
blindly signed by the Taler exchange and stored in the consumer's wallet,
which is value-based.  The consumer can then spend its coins at
merchants using cryptographic signatures over electronic contracts.
Merchants must immediately deposit the coins at the exchange, which
performs an online check for double-spending.  The exchange will then
credit the merchant's register-based accounts.

Thus, the Taler system combines value-based and register-based
accounting, providing anti-money laundering capabilities by making
income transparent, identifying the users of the system (upon
withdrawal and deposit), but also providing privacy for citizens by
not requiring identification of the buyer for ordinary transactions.
Thus, Taler is a hybrid system combining the advantages of value-based
and register-based solutions.

Specifically, Taler addresses the following requirements outlined in
the report:

\begin{description}
\item[Specified in Swedish Krona]
  Taler is designed to work for all currencies for which
  a register-based accounting system exists.
\item[Payment size]
  Taler is designed to handle micropayments as well as arbitrarily large payments between consumers, companies and authorities.
  Regulation may impose limits on withdrawals and maximum amounts transacted.
\item[Direct claim on Riksbank]
  The Taler design involves the exchange owning an escrow account
  (for example, with the Riksbank) to keep the funds to back the issued electronic coins.
  The contractual obligations of the system are supposed to entitle the holder of
  e-Krona to exchange them anytime into other representations of Krona.
\item[Accessible in real-time]
  Customers and merchants always have access to their full account
  histories and their balances on their local computer.  Backups and
  cross-device synchronization will also be supported.
\item[Payments in real-time]
  Payments typically clear in one network RTT.  
  The system is designed for 24/7 operations.
\item[Offline payments]
  For Taler transactions, either the payer or the merchant must be online and able to
  communicate with the exchange.  Otherwise the merchant cannot be sure that the payer
  did not double-spend and risks being defrauded.
\item[Anonymous payments]
  Taler is designed for payers to remain anonymous when buying goods, unless regulation
  requires disclosure (i.e. for particular sensitive purchases).
  However, the merchant is never anonymous.
\item[e-Krona account]
  A register-based account is required for merchants to receive transactions.
  The exchange also must have an escrow account.
\item[Riksbank functions]
  The Riksbank would primarily hold the escrow account.  It could also either
  (1) run the operations of the exchange and guarantee the exchange of e-Krona
  in Swedish Krona directly, or (2) else audit privately operated exchanges
  similar to its regulatory oversight of conventional banks and payment processors.
\item[No bank account necessary]
  Taler can enable distribution of funds (i.e. from social security) directly to
  wallets.  Thus, citizens having a Taler wallet could be given remittances without
  the need for a bank account.  However, merchants must have a register-based
  bank account to receive payments.
\item[Interest payments]
  Taler could theoretically support interest on e-Krona by varying the exchange
  rate between e-Krona and Krona.  Taler can also theoretically support {\em negative}
  interest on coins held long-term in wallets.
\item[Connection to existing payment systems]
  With proper system integration, wire transfers, debit and credit cards or even
  NFC-enabled ATMs could all be used to fund the e-Krona wallet.
\end{description}

Taler effectively provides electronic cash and thus solves the problem
of gaining access to risk-free assets.  As the Riksbank supervises the
e-Krona escrow funds (either directly or by auditing the private
operator), the government can assure citizens that they can always
exchange e-Kronas back to cash.  Thus, in Taler's design, the government
acts as a trust anchor.

Taler removes inefficiencies the current system creates through fraud
risks inherent in register-based systems.  In Taler, citizens only
ever authenticate to their bank (or social services).  By avoiding
disclosing personally identifying information or even performing
credit card-style authentication via third parties, Taler improves
usability and eliminates most vectors of authentication token
compromise. 


\section*{What challenges and opportunities do you envisage?}

Taler provides the advantages of cash while supporting taxation and
limiting criminal abuse, as recipients of payments are identifiable.
Furthermore, Taler transactions are faster, easier and more secure
than cash or credit card transactions.

The main challenge is the integration of the Taler merchant backend
into the diverse POS systems that exist today.  While integrating
Taler can be done with a few hundred lines of code, NFC-enabled POS
systems would require at least a firmware update.  Convincing vendors
to upgrade their systems will thus require a major up-front
investment.

Taler also requires further development to ensure that wallets are
available on all relevant platforms.  However, consumer systems are
much less diverse and hence this effort is significantly smaller.

Deploying Taler at scale should have no major impact on monetary
policy because the issued e-Krona would be 1:1 backed by Swedish Krona
in the escrow account at the Riksbank.  However, if there is a
significant shift from the use of credit-cards to e-Krona, there might
be a reduction in M2 from fractional reserve banking as e-Krona is
debit-based while credit-cards are credit-based.  Thus, instead of
commercial bank money being created from debts, consumers may
effectively hold e-Krona claims against the escrow account at the
central bank.  The resulting reduction in M2, and the loss of revenue
at banks from credit-card interest payments, may require adjustments
in monetary policies.


\section*{What is missing in our concept?}


A key requirement for governments considering electronic payment
systems is the preservation of the Commons.  Cash is a Commons as all
market participants have equal liberties in handling cash.  If cash is
replaced by proprietary solutions such as Visa's credit card system or
ApplePay, these companies have exclusive control over critical
infrastructure, which often leads to high fees.  Worse, such payment
service providers may discriminate against individuals or certain
businesses and can refuse service to individuals or businesses without
judicial oversight.

In contrast, Taler is implemented as Free Software distributed under
the GNU General Public License, and without patent encumbrances.  This
ensures that any government retains sovereignty after deploying Taler,
as it can liberally inspect, use and modify the software.  In
particular, no foreign government or company can impose their own
restrictions or regulatory regime.  Governments can foster competition
between multiple Taler exchange operators, or run a Taler exchange as
a government monopoly equivalent to a government mint for coins.



\section*{Contact}

\renewcommand\logo{}

\begin{center}
  \includegraphics[width=0.5\textwidth]{../presentations/comprehensive/taler-big-accent.pdf}
  \vfill  
  {\Large  \url{https://taler.net/}}
  \vfill

\begin{tabular}{l l l}
C. Grothoff	&	grothoff@taler.net	&	+41 78 692 6894 \\
L. Schumacher	&	schumacher@taler.net	&	+41 79 865 9365 \\
M. Widmer	&	widmer@taler.net	&	+41 79 900 4000 \\
\end{tabular}
\end{center}

\vfill

\includegraphics[width=0.2\textwidth]{../presentations/investors/partner-logos/ashoka.png}
\hfill
  \includegraphics[width=0.1\textwidth]{../presentations/investors/partner-logos/inria.png}
\hfill
\includegraphics[width=0.1\textwidth]{../presentations/investors/partner-logos/tum.png}
\hfill
  \includegraphics[width=0.1\textwidth]{../presentations/investors/partner-logos/gnu.jpeg}

\end{document}