近年來，由於網際網路的快速發展和個人電腦的普及化，人們漸漸使用電子商務所提供的各種服務，然而在電子商務中電子現金占有相當重要的角色，消費者交易時不需攜帶大量金錢，只需透過網際網路就可以完成交易，而且每一筆交易都保有完整交易紀錄，可供消費者查詢消費紀錄。
本論文中，我們設計一個基於免憑證簽章技術之多銀行電子錢包系統，建置於智慧型裝置上，我們採用智慧型裝置模擬提款卡或存摺跨銀行提領現金系統的架構，讓消費者持智慧型裝置至中央銀行授權之發行電子現金銀行提領電子現金，並將其電子現金儲存至智慧型裝置中，提升消費者使用的意願和方便性。

The fast growing of Internet and popularity of personal computers in recent years have gradually enable people to use kinds of E-commerce services, E-cash plays a rather significant role in e-commerce. It is not necessary to carry a large amount of money for transactions, instead the transaction can be completed via Internet and each transaction will be kept for the consumers’ reference.
In this thesis, we design a multi-bank E-wallet system, based on certificateless signature technology, built in the smart mobile device. We adopt the structure simulating the smart mobile device as the bank card or checkbook to withdraw cash in different banks so the consumers are allowed to withdraw E-cash with the smart mobile device in the E-cash-issuance banks authorized by the central bank and save the e-cash in the smart mobile device to enhance consumers’ willingness and the convenience to use the service.

目錄
誌謝 IV
中文摘要 V
ABSTRACT VI
目錄 VII
表目錄 X
圖目錄 XI
第一章 緒論 1
1.1 前言 1
1.2 研究動機 1
1.3 研究目的 2
1.4 論文架構 3
第二章 相關密碼學理論與技術 4
2.1 電子現金系統(E-cash system) 4
2.2 部分盲簽章技術(Partially-blind signature scheme) 5
2.3 雙線性配對(Bilinear pairings) 7
2.4 免憑證公鑰密碼系統(Certificateless public key cryptography) 8
2.5 Zhang等人的免憑證部份盲簽章 10
2.5.1 參數符號定義 10
2.5.2 回顧Zhang學者的協定 11
2.5.3 討論Zhang學者等人之結論 17
第三章 基於免憑證簽章技術之多銀行電子錢包系統 19
3.1 前言 19
3.1.1 系統流程步驟 19
3.1.2 參數符號定義 21
3.1.3 初始階段 22
3.1.4 註冊階段 26
3.1.5 登入階段 27
3.1.6 提款階段 30
3.1.7 付款階段 33
3.1.8 存款階段 36
第四章 安全和效能分析 38
4.1 安全分析 38
4.1.1不可否認性 38
4.1.2匿名性 38
4.1.3預防重複消費 39
4.1.4不可偽造性 39
4.1.5防止重送攻擊 39
4.1.6完整性 40
4.2 效能分析 40
第五章 結論 42
參考文獻 43
附錄 A：作者簡介 47
附錄 B：口試委員意見修正 48


表目錄
表 1. 簽章資料表 17
表2. 先前學者與我們的方案之運算成本比較 40


圖目錄
圖 1. Fan等人協定-提款階段流程圖 7
圖 2. Fan等人協定-存款階段流程圖 7
圖 3. Zhang等人協定-註冊階段 13
圖 4. Zhang等人協定-提款階段 14
圖 5. Zhang等人協定-付款和存款階段 16
圖 6.電子現金系統流程圖 20
圖 7.多銀行電子錢包系統-註冊銀行初始階段 24
圖 8.多銀行電子錢包系統-提款銀行初始階段 25
圖 9.多銀行電子錢包系統-消費者初始階段 26
圖 10.多銀行電子錢包系統-註冊階段 27
圖 11.多銀行電子錢包系統-登入階段 30
圖 12.多銀行電子錢包系統-提款階段(一) 33
圖 13.多銀行電子錢包系統-提款階段(二) 33
圖 14.多銀行電子錢包系統-付款階段(一) 36
圖 15.多銀行電子錢包系統-付款階段(二) 36
圖 16. 多銀行電子錢包系統-存款階段 37

參考文獻
[1]W. S. Juang, “RO-cash：An efficient and practical recoverable pre-paid offline e-cash scheme using bilinear pairings ,” Journal of Systems and Software, Vol. 83, No. 4, pp. 638-645, 2010.
[2]W. S. Juang, “D-cash：A flexible pre-paid e-cash scheme for date-attachment,” Electronic Commerce Research and Applications, Vol. 6, No. 1, pp. 74-80, 2007.
[3]C. L. Chen and M. H. Liu, “A traceable E-cash transfer system against blackmail via subliminal channel,” Electronic Commerce Research and Applications, Vol. 8, No. 6, pp. 327-333, 2009.
[4]E. W. Lu and L. C. Wuu, “Multiple banks electronic payment systems by group blind signatures,” Journal of Internet Technology, vol. 5, No. 1, pp. 41-46, 2004.
[5]J. Zhang, L. Ma and Y. Wang, “Fair e-cash system without trustees for multiple banks,” International Conference on Computational Intelligence and Security Workshops, pp. 585-587, 2007.
[6]C. Wang, Q. Li and X. Yang, “A fair and transferable off-line electronic cash system with multiple banks,” Proceedings of IEEE International Conference on e-Business Engineering, pp. 189-194, 2007.
[7]楊伏夷, 江承軒, “離線電子錢包系統應用於智慧型行動裝置,” 朝陽科技大學碩士論文, 2011.
[8]M. Abe and E. Fujisaki, “How to date blind signatures,” International Conference on the Theory and Application of Cryptology and information Security, pp. 244-251, 1996.
[9]D. Chaum, “Blind signature for untraceable payments,” In proceedings of CRYPTO ''82, pp. 199-203, 1982.
[10]C. I. Fan, W. K. Chen and Y. S. Yeh, “Date attachable electronic cash,” Computer Communication, Vol. 23, No. 4, pp. 425-428, 2000.
[11]D. Boneh and M. Franklin, “Identity-base encryption from the Weil pairing,” Appears in SIAM J. of Computing, Vol. 32, No. 3, pp. 586-615, 2003.
[12]D. Boneh, X. Boyen and H. Shacham, “Short group signatures,” In proceedings of CRYPTO ''04 , LNCS. 3152, pp. 41-45, 2004.
[13]C. L. Liu, G. Horng and T. Y. Chen, “Further refinement of pairing computation based on Miller''s algorithm,” Applied Mathematics and Conputation, Vol. 189, No. 1, pp. 395-409, 2007.
[14]R. Sakai, K. Ohgishi and M. Kasahara, “Cryptosystems based on pairing,” SCIS 2000 Okinawa Japan Jan, pp. 26-28, 2000.
[15]X. Li and K. Chen, “Identity based proxy-signcryption scheme from pairings,” IEEE International Conference on Services Computing, pp. 494-497, 2004.
[16]D. Nalla and K. C. Reddy, “Signcryption scheme for identity-based cryptosystems,” Mathematics of Computation, Report 66, 2003.
[17]A. Joux, “A one round protocol for tripartite Diffie-Hellman,” JOURNAL OF CRYPTOLOGY, Vol. 17, No. 4, pp. 263-276, 2004.
[18]N. P. Smart, “An identity based authenticated key agreement protocol based on Weil pairing,” Electronics Letters, Vol. 38, No. 13, pp. 630-632, 2002.
[19]S. S. Al-Riyami and K. G. Paterson, “Certificateless public key cryptography,” Lecture Notes in Computer Science, Vol. 2894, pp. 452-473, 2003.
[20]P. Gutmann, “PKI: It’s not dead, just resting,” IEEE Computer, Vol. 35, No. 8, pp. 41-49, 2002.
[21]A. Shamir, “Identity based cryptosystems and signature schemes,” International Crytology Conference, pp. 47-53, 1984.
[22]L. Zhang, F. Zhang, B. Qin and S. Liu, “Provably-secure electronic cash based on certificateless partially-blind signatures,” Electronic Commerce Research and Applications, Vol. 10, No. 5, pp. 545-552, 2011.
[23]M. T. Chen, C. I. Fan, W. S. Juang and Y. C. Yeh, “An efficient electronic cash scheme with multiple banks using group signature,” International JournalofInnovativeComputing, Vol. 8, No. 7, pp. 4469-4482, 2012.