{"id":"https://openalex.org/W4402427308","doi":"https://doi.org/10.1145/3779208.3805963","title":"PayOff: A Regulated Central Bank Digital Currency with Private Offline Payments","display_name":"PayOff: A Regulated Central Bank Digital Currency with Private Offline Payments","publication_year":2026,"publication_date":"2026-06-01","ids":{"openalex":"https://openalex.org/W4402427308","doi":"https://doi.org/10.1145/3779208.3805963"},"language":"en","primary_location":{"id":"doi:10.1145/3779208.3805963","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3779208.3805963","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3779208.3805963","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5110167490","display_name":"Carolin Beer","orcid":null},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Carolin Beer","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":"https://orcid.org/0000-0002-3480-2330","affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5107124397","display_name":"Sheila Zingg","orcid":null},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Sheila Zingg","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":"https://orcid.org/0009-0006-2442-6200","affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021906979","display_name":"Kari Kostiainen","orcid":"https://orcid.org/0000-0002-9092-8683"},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Kari Kostiainen","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":"https://orcid.org/0000-0002-9092-8683","affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065877761","display_name":"Karl W\u00fcst","orcid":"https://orcid.org/0000-0001-6000-3009"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Karl W\u00fcst","raw_affiliation_strings":["Mysten Labs, Zurich, Switzerland"],"raw_orcid":"https://orcid.org/0000-0001-6000-3009","affiliations":[{"raw_affiliation_string":"Mysten Labs, Zurich, Switzerland","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110624957","display_name":"Vedran \u010capkun","orcid":null},"institutions":[{"id":"https://openalex.org/I83860666","display_name":"HEC Paris","ror":"https://ror.org/0423jsj19","country_code":"FR","type":"education","lineage":["https://openalex.org/I83860666"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Vedran Capkun","raw_affiliation_strings":["HEC Paris, Paris, France"],"raw_orcid":"https://orcid.org/0000-0002-2971-8679","affiliations":[{"raw_affiliation_string":"HEC Paris, Paris, France","institution_ids":["https://openalex.org/I83860666"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5077290467","display_name":"Sr\u0111jan \u010capkun","orcid":"https://orcid.org/0000-0001-5727-3673"},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Srdjan Capkun","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":"https://orcid.org/0000-0001-5727-3673","affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"693","last_page":"714"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.9065999984741211,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.9065999984741211,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/digital-currency","display_name":"Digital currency","score":0.7732541561126709},{"id":"https://openalex.org/keywords/payment","display_name":"Payment","score":0.7588841915130615},{"id":"https://openalex.org/keywords/stochastic-game","display_name":"Stochastic game","score":0.6783369183540344},{"id":"https://openalex.org/keywords/currency","display_name":"Currency","score":0.65375816822052},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.6029936671257019},{"id":"https://openalex.org/keywords/virtual-currency","display_name":"Virtual currency","score":0.5367751121520996},{"id":"https://openalex.org/keywords/central-bank","display_name":"Central bank","score":0.5364049077033997},{"id":"https://openalex.org/keywords/monetary-economics","display_name":"Monetary economics","score":0.4253024160861969},{"id":"https://openalex.org/keywords/private-information-retrieval","display_name":"Private information retrieval","score":0.42212772369384766},{"id":"https://openalex.org/keywords/commerce","display_name":"Commerce","score":0.3660026788711548},{"id":"https://openalex.org/keywords/economics","display_name":"Economics","score":0.3600633144378662},{"id":"https://openalex.org/keywords/financial-system","display_name":"Financial system","score":0.33595630526542664},{"id":"https://openalex.org/keywords/finance","display_name":"Finance","score":0.3118384778499603},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.2855279743671417},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2443031370639801},{"id":"https://openalex.org/keywords/microeconomics","display_name":"Microeconomics","score":0.23932835459709167},{"id":"https://openalex.org/keywords/monetary-policy","display_name":"Monetary policy","score":0.11435011029243469}],"concepts":[{"id":"https://openalex.org/C48220719","wikidata":"https://www.wikidata.org/wiki/Q10836209","display_name":"Digital currency","level":3,"score":0.7732541561126709},{"id":"https://openalex.org/C145097563","wikidata":"https://www.wikidata.org/wiki/Q1148747","display_name":"Payment","level":2,"score":0.7588841915130615},{"id":"https://openalex.org/C22171661","wikidata":"https://www.wikidata.org/wiki/Q1074380","display_name":"Stochastic game","level":2,"score":0.6783369183540344},{"id":"https://openalex.org/C141121606","wikidata":"https://www.wikidata.org/wiki/Q8142","display_name":"Currency","level":2,"score":0.65375816822052},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.6029936671257019},{"id":"https://openalex.org/C47487560","wikidata":"https://www.wikidata.org/wiki/Q4112083","display_name":"Virtual currency","level":3,"score":0.5367751121520996},{"id":"https://openalex.org/C2992735868","wikidata":"https://www.wikidata.org/wiki/Q66344","display_name":"Central bank","level":3,"score":0.5364049077033997},{"id":"https://openalex.org/C556758197","wikidata":"https://www.wikidata.org/wiki/Q580018","display_name":"Monetary economics","level":1,"score":0.4253024160861969},{"id":"https://openalex.org/C99221444","wikidata":"https://www.wikidata.org/wiki/Q1532069","display_name":"Private information retrieval","level":2,"score":0.42212772369384766},{"id":"https://openalex.org/C54750564","wikidata":"https://www.wikidata.org/wiki/Q26643","display_name":"Commerce","level":1,"score":0.3660026788711548},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.3600633144378662},{"id":"https://openalex.org/C73283319","wikidata":"https://www.wikidata.org/wiki/Q1416617","display_name":"Financial system","level":1,"score":0.33595630526542664},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.3118384778499603},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.2855279743671417},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2443031370639801},{"id":"https://openalex.org/C175444787","wikidata":"https://www.wikidata.org/wiki/Q39072","display_name":"Microeconomics","level":1,"score":0.23932835459709167},{"id":"https://openalex.org/C126285488","wikidata":"https://www.wikidata.org/wiki/Q178476","display_name":"Monetary policy","level":2,"score":0.11435011029243469}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.1145/3779208.3805963","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3779208.3805963","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},{"id":"pmh:oai:www.research-collection.ethz.ch:20.500.11850/801219","is_oa":true,"landing_page_url":"http://hdl.handle.net/20.500.11850/801219","pdf_url":null,"source":{"id":"https://openalex.org/S4306402302","display_name":"Repository for Publications and Research Data (ETH Zurich)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I35440088","host_organization_name":"ETH Zurich","host_organization_lineage":["https://openalex.org/I35440088"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ASIA CCS '26: Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"pmh:oai:arXiv.org:2408.06956","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2408.06956","pdf_url":"https://arxiv.org/pdf/2408.06956","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"text"},{"id":"doi:10.48550/arxiv.2408.06956","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2408.06956","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"},{"id":"doi:10.3929/ethz-c-000801219","is_oa":true,"landing_page_url":"https://doi.org/10.3929/ethz-c-000801219","pdf_url":null,"source":{"id":"https://openalex.org/S7407051236","display_name":"ETH Z\u00fcrich Research Collection","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Other"}],"best_oa_location":{"id":"doi:10.1145/3779208.3805963","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3779208.3805963","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4391262104","https://openalex.org/W3022138056","https://openalex.org/W3088948958","https://openalex.org/W4365797016","https://openalex.org/W4379958641","https://openalex.org/W4360762746","https://openalex.org/W1818692820","https://openalex.org/W2262382698","https://openalex.org/W3109261001","https://openalex.org/W4383619120"],"abstract_inverted_index":{"The":[0,117],"European":[1,27],"Central":[2],"Bank":[3],"is":[4,123,222],"preparing":[5],"for":[6,32,39],"the":[7,18,26,33,57,85,131,142,204,217,232,237],"potential":[8],"issuance":[9],"of":[10,59,84,107,120,145,220,234],"a":[11,76,125],"central":[12,64,205],"bank":[13,206],"digital":[14,19,34,132],"currency":[15],"(CBDC),":[16],"called":[17],"euro.":[20],"A":[21],"recent":[22],"regulatory":[23],"proposal":[24],"by":[25,130],"Commission":[28],"defines":[29],"several":[30],"requirements":[31,229],"euro,":[35],"such":[36,72,161],"as":[37,162],"support":[38],"both":[40],"online":[41,244],"and":[42,56,109,149,165,183,202,227],"offline":[43,73,90,138,197,224],"payments.":[44,139],"Offline":[45],"payments":[46,74,198,235],"are":[47,93],"expected":[48],"to":[49,113,168],"enable":[50],"cash-like":[51],"privacy,":[52,157],"local":[53,146],"payment":[54,115,147,210,225],"settlement,":[55],"enforcement":[58],"holding":[60,163],"limits.":[61],"While":[62],"other":[63],"banks":[65],"have":[66],"expressed":[67],"similar":[68],"desired":[69],"functionality,":[70],"achieving":[71],"poses":[75],"novel":[77,126],"technical":[78],"challenge.":[79],"We":[80,140],"observe":[81],"that":[82,178,187,196,203,223,236],"none":[83],"existing":[86],"research":[87],"solutions,":[88],"including":[89],"E-cash":[91],"schemes,":[92],"fully":[94],"compliant.":[95],"Proposed":[96],"solutions":[97],"based":[98],"on":[99,137],"secure":[100,172],"elements":[101],"offer":[102],"no":[103],"guarantees":[104],"in":[105,190,231,245],"case":[106],"compromise":[108],"can":[110,199,207],"therefore":[111],"lead":[112],"significant":[114],"fraud.":[116],"main":[118,218],"contribution":[119],"this":[121],"paper":[122],"PayOff,":[124],"CBDC":[127],"design":[128],"motivated":[129],"euro":[133],"regulation,":[134],"which":[135],"focuses":[136],"analyze":[141],"security":[143,152],"implications":[144],"settlement":[148],"identify":[150],"new":[151],"objectives.":[153],"PayOff":[154,179,221],"protects":[155],"user":[156],"supports":[158],"complex":[159],"regulations":[160],"limits,":[164],"implements":[166],"safeguards":[167],"increase":[169],"robustness":[170],"against":[171],"element":[173],"failure.":[174],"Our":[175,193],"analysis":[176],"shows":[177,195],"provides":[180],"strong":[181],"privacy":[182],"identifies":[184],"residual":[185],"leakages":[186],"may":[188],"arise":[189],"real-world":[191],"deployments.":[192],"evaluation":[194],"be":[200],"fast":[201],"handle":[208],"high":[209],"loads":[211],"with":[212],"moderate":[213],"computing":[214],"resources.":[215],"However,":[216],"limitation":[219],"messages":[226],"storage":[228],"grow":[230],"number":[233],"sender":[238],"makes":[239],"or":[240],"receives":[241],"without":[242],"going":[243],"between.":[246]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2024-09-11T00:00:00"}