Abstract

We specify a one-tap broadcast operation for anonymous peer-to-peer value transfer to every co-present, human-verified recipient within Bluetooth Low Energy (BLE) proximity, optionally carrying money or time, in which each recipient receives a verifiable receipt and the sender receives no exportable record. The recipient set is resolved by physical co-presence rather than account lookup: devices advertise rotating, unlinkable proximity beacons, with ultra-wideband ranging and peer-to-peer nearby-connection APIs as optional substrates, and the platform learns only that two devices were in range, never absolute location. Components: (1) sender authentication by a per-action passkey signature, within a proof-of-humanity layer attesting a distinct human; (2) recipient-side filtering, in which each recipient's own criteria (verification depth, attached value, social distance) decide delivery, so an anonymous channel cannot force an unwanted relation, and the sender learns only an aggregate count; (3) equal division of attached funds across the filtered set by default, with sender-specified floors or ceilings; (4) a per-recipient receipt settled on a public ledger, attesting a verified human sender, proximity at broadcast time, timestamp and amount, so a recipient can prove an anonymous tip authentic without re-identifying the sender; (5) asymmetric anonymity, with compliance records held internally and no sender-side export or listing endpoint; (6) an institution-scoped variant substituting a registered geographic bounding box, with institutional and individual opt-in, for radio range. Recipient notifications default to a daily aggregate rather than per-transfer alerts, and volume is not throttled. Stated limits cover donor-disclosure regulation, vulnerable recipients, radio-range variability and device access.

Creative Commons License

Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.

Download

Share

COinS