DigiCash

Imagine Anna wants to buy an article online. A card payment creates a record linking her account, the merchant and the amount. David Chaum asked whether every digital payment really needed that connection. Simply hiding the records in a secure database was not enough for him. He wanted the bank to have no direct cryptographic way to match a particular spent digital coin to its withdrawal. DigiCash was the company bringing his research into practice; eCash was the payment technology’s name. Neither meant a network without banks. [1] [6]

Take a simple example involving one dollar. Anna signs into her bank account and requests digital cash. The wallet, a program on her computer for preparing and storing digital coins, prepares a unique coin number and mathematically disguises it. The bank deducts one dollar from her account and signs the transformed data. It therefore knows the customer and the withdrawal’s value, but not the original number that will identify the coin later. This is not free money: issuing a digital coin goes together with deducting the corresponding amount from an account. [5] [7]

The technique is called a blind signature. Think of a slip inside an opaque envelope through which a verifiable stamp can be impressed. The real process uses a carefully designed mathematical operation, not paper. A digital signature is not an image of a handwritten signature. Software calculates it using a private key that the bank keeps secret; the corresponding public key lets others verify the signature. After signing, Anna’s wallet removes the disguise, yet the signature remains valid for the original coin. Someone can later verify that the issuing bank really signed it. The disguise does not let Anna turn a dollar coin into an arbitrary larger amount. Combining verifiability with a hidden serial number is the heart of the idea. [2] [5] [6]

Anna sends the coin to a merchant, who presents it to the issuing bank. In the online process, the bank checks the signature and whether the same number appeared in an earlier payment. If both checks pass, it accepts the coin and credits the merchant with the corresponding value. The merchant need not trust Anna’s claim that the money is valid. At redemption, the bank sees the coin and its recipient, but the blind signature itself does not reveal which withdrawal produced that coin. This is more precise than saying the bank sees nothing at all. [5] [7]

Digital data can be copied, so Anna could send the same coin to two merchants. That is a double spend. Here, the bank prevents it with a database of redeemed serial numbers: it rejects a number used again. No public chain of blocks or miners handles this check. Chaum, Amos Fiat and Moni Naor also researched offline schemes in which repeated spending could expose the offender afterwards. That differs from an immediate online check; the two approaches cannot be merged into a promise that every disconnected payment offers identical guarantees. [5] [7]

Chaum introduced blind signatures in research dating to 1982. He founded DigiCash in Amsterdam in 1990. Early internet trials used CyberBucks, experimental units rather than ordinary bank dollars. On 23 October 1995, DigiCash and the US institution Mark Twain Bank announced the launch of a dollar electronic-cash service. That distinction mattered: people were no longer merely trying software, but withdrawing value from an actual account. A service announcement alone, however, does not show that the wider public adopted this way of paying. [1] [3] [7]

Anna may still have an account in her own name. The bank knows her withdrawals and their amounts; a merchant may know a delivery address or customer login. Comparing times and amounts can also provide clues. A blind signature protects a particular link within the payment system, not every trace surrounding a purchase. The computer preparing the coin matters too: malicious software can destroy privacy before payment begins. The technology aims to limit unnecessary connections between records, not to promise complete invisibility. [6] [7]

A digital coin here represents value recognised by a particular issuer. If the bank or service stops operating, knowledge of cryptography alone cannot ensure that a merchant will accept the money or that it can be redeemed. Service terms and keeping the wallet safe also matter. Even lost-data recovery cannot be assumed: the 1995 announcement described recovery using a secret starting value called a seed as a plan for future versions. That historical plan is not the same as a standard Bitcoin wallet backup today. Privacy, availability and an enforceable monetary claim are separate questions. [7]

In November 1998, WIRED reported that DigiCash had filed for US Chapter 11 protection, a bankruptcy process allowing reorganisation. The report described debts and difficulty achieving sufficient adoption. That is not evidence that anyone broke blind signatures. A mathematically sound design is not enough for a technology to succeed: it also needs willing banks, merchants and customers. Still, this general explanation should be distinguished from a claim that we know the single precise cause of the company’s collapse. [4]

Bitcoin later addressed another part of the same problem: transferring digital value without a bank issuing coins and maintaining the decisive list of spent units. Nodes are computers running software that checks transactions against shared rules. Transactions are grouped into linked blocks. Proof of Work is the computational work needed to create those blocks; it makes rewriting the recorded history costly. Payments appear in a public history, however, so removing the issuer does not automatically provide the same privacy as blind signatures. DigiCash is therefore more than a failed Bitcoin. It shows that payment privacy and independence from an institution are distinct goals, and that a payment system should be assessed on both. [5] [8]