Privacy-Preserving Payment Splitting
Authors: Saba Eskandarian (Stanford University), Mihai Christodorescu (Visa Research), Payman Mohassel (Facebook (work done while at Visa Research) 1 Some popular payment splitting apps: Splitwise, Receipt Ninja, BillPin, SpotMe, Conmigo, and Settle Up.)
Volume: 2020
Issue: 2
Pages: 67–88
DOI: https://doi.org/10.2478/popets-2020-0018
Abstract: Widely used payment splitting apps allow members of a group to keep track of debts between members by sending charges for expenses paid by one member on behalf of others. While offering a great deal of convenience, these apps gain access to sensitive data on users’ financial transactions. In this paper, we present a payment splitting app that hides all transaction data within a group from the service provider, provides privacy protections between users in a group, and provides integrity against malicious users or even a malicious server. The core protocol proceeds in a series of rounds in which users either submit real data or cover traffic, and the server blindly updates balances, informs users of charges, and computes integrity checks on usersubmitted data. Our protocol requires no cryptographic operations on the server, and after a group’s initial setup, the only cryptographic tool users need is AES. We implement the payment splitting protocol as an Android app and the accompanying server. We find that, for realistic group sizes, it requires fewer than 50 milliseconds per round of computation on a user’s phone and the server requires fewer than 300 microseconds per round for each group, meaning that our protocol enjoys excellent performance and scalability properties.
Keywords: Privacy, Payment Splitting
Copyright in PoPETs articles are held by their authors. This article is published under a Creative Commons Attribution-NonCommercial-NoDerivs 3.0 license.
