Add online dsprotection rejection mechanism

cryptimeleon / incentive-system

A cryptographic incentive system.

Apache License 2.0

3 stars 0 forks source link

Closed this-kramer closed 2 years ago

this-kramer commented 2 years ago

Scenario:

User sends spend-request
Incentive service asks dsp-service if the dsid of the request was used before (O(1) lookup)
Reject request if found
Otherwise continue as before and run dbsync afterward

=> Benefit: precaution instead of cleaning up after a ds-attack where possible; does not record double-spends that happen in the same store

pschuermann97 commented 2 years ago

current state: Paul made buffering mechanism for transactions ("DBSync task") yesterday, Patrick now needs to implement check-and-reject mechanism