TX = (c_a, c_p, pub, ktag, σ_T, h, σ_CB )

c_a

The secret of payer, payee and amount under the encryption of K for audit. c_a = enc_K (epk_payer, epk_payee, v).

c_p

A secret s encrypted by payee’s epk to prove ownership of the new-formed UTXO. c_p = enc_epkpayee(bank_payee, v, s).

pub

The UTXO spent and a new-formed UTXO. UTXO = H (epk_payee, bank_payee, v, ktag, s).

ktag

A tag to indicate an anonymity account set of payee.

σ_T

Proof of the correct formation of a transaction in TEE (see Section 3.3).

h

The hash of prior transaction (added by central bank for order decision).

σ_CB

Proof of central bank to confirm the transaction.