I am thinking on this issue...
Maybe someone has any ideas?
I have thoughts that the only way to secure double payments is to attract mediators to offline transactions.
If user wants to pay offline he goes to a mediator asking to provide his offline coins with his digital signature. Each recipient decide for him self does he trust this mediator or not.
Who is mediator? This is public entity which offers bitcoin owners to sing their offline bitcoins with its digital signature. Mediator publicly guarantees that his offline bitcoins singed by him shall be reimbursed if recipient find out his bitcoins been counterfeited
Such Mediators shall likely demand users to be fully authorized (ID and so on) and to pay commission and the most important offline user should pay pledge until made offline transactions been verified.
If the attacker with bad intentions played along with this scenario, I'd expect them to make the duplicates right after the mediator signs the offline coin, leaving us with the same problem.
This is question of trust...
But I hope that the real solution for this issue can be found by applying some software algorithms not Mediators!
Trust, via some form of web-of-trust network, can augment the use of Bitcoin greatly... If I'm about to go shopping in the offline bazaar, I link my public trust profile to the bazaar the day before, so that my public profile, rating, and key can replicate through their network via a nightly sync or some such. When I visit, if I hold my private key, I can sign a message, proving I am the trusted profile holder, and someone safe to do business with. Web-of-Trust in general, offline or not, is going to revolutionize commerce as much as Bitcoin has, in conjunction with Bitcoin, but maybe we're overthinking this...
Bitcoin couldn't have been so useful prior to pervasive Internet connectivity... Perhaps there's no way around that. However, if the "offline" bazaar I described earlier had an
intranet, it could run standard Bitcoin software to relay transactions among vendors, shoppers, etc... if those involved at least had electronic devices and wifi. If only one vendor had Internet access, this problem vanishes... or if one vendor had intermittent Internet access... the problem is also greatly reduced. Then again, if the
attacker brings his own Internet connection and does the first double spend right before his first intranet transaction, boom, lotsa invalidation. That's only mitigated by not knowing when the honest vendors have their scheduled Internet sync occuring, so with each act of fraud, he increases his chance of being caught in the act...?
The solution here might just be standard Bitcoin protocol, plus the advent of pervasive Internet connectivity everywhere on the planet, but meanwhile, that doesn't help with the offline idea.
Is the idea here that the NFC device itself holds a certain value (the hardware value itself), and the normal accepted values of BTC stored in such a device would preclude such fraud from being a profitable exercise?
can you explain your thoughts?
If these NFC tokens have a hardware value of .0025
BTC (unfunded), and the maximum traditionally accepted value, per token is .01
BTC, enacting such a fraud would have a maximum limit on the rewards-to-risk ratio, which might incentivize would-be crooks to go back to standard shoplifting, etc... instead.