<p>There are multiple articles available in internet which contain that paragraph. For example: <a href="http://cs229.stanford.edu/proj2014/Phillip%20Pham,Steven%20Li,%20Anomaly%20Detection%20in%20Bitcoin%20Network%20Using%20Unsupervised%20Learning%20Methods.pdf" rel="nofollow noreferrer">http://cs229.stanford.edu/proj2014...</a>, <a href="https://arxiv.org/pdf/1611.03942.pdf" rel="nofollow noreferrer">https://arxiv.org/pdf/1611.03942.pdf</a>, etc</p>
<p>Each one seems to attribute the origin of the data to different sources, but the numbers act as a fingerprint (<strong>6,336,769 nodes and 28,143,065 edges</strong>), so it can be traced back to a work by <em>Ivan Brugere</em> which seems to have been available in the past, but not now, at <a href="http://compbio.cs.uic.edu/%20data/bitcoin/" rel="nofollow noreferrer">compbio.cs.uic.edu</a>, and from which <a href="https://github.com/ivan-brugere/Bitcoin-Transaction-Network-Extraction/blob/master/README.pdf" rel="nofollow noreferrer">some docs remain at github</a>.</p>
<p>From them he refers to the work &quot;<a href="http://arxiv.org/pdf/1107.4524v2.pdf" rel="nofollow noreferrer">An Analysis of Anonymity in the
Bitcoin System</a>&quot; by <em>Fergal Reid and Martin Harrigan</em>:</p>
<blockquote>
<p>Suppose U is, at first, incomplete in the sense that each vertex represents a single public-key rather than a user and that each directed edge between a source and a target represents an input-output pair of a single transaction, where the input's public-key corresponds to the source and the output's public-key corresponds to the target. In order to perfect this network, <strong>we need to contract each subset of vertices whose corresponding public-keys belong to a single user.</strong></p>
<p>... as noted by Nakamoto:
&quot;Some linking is still unavoidable with <strong>multi-input transactions, which necessarily reveal that their inputs were owned by the same owner.</strong> The risk is that if the owner of a key is revealed, linking could reveal other transactions that belonged to the same owner.&quot;</p>
</blockquote>
<p>And closing the argument, in an extensive work covering the same dataset:</p>
<p><a href="http://www.mdpi.com/1999-5903/8/1/7" rel="nofollow noreferrer">Analyzing the Bitcoin Network: The First Four Years - <em>Matthias Lischke and Benjamin Fabian, Institute of Information Systems, Humboldt-Universität zu Berlin, Spandauer Str. 1, 10178 Berlin, Germany</em></a> (CC BY 4.0):</p>
<blockquote>
<p>The user information is organized by the second group of files [...], where <strong>a “user” is a grouping of public keys that were used as inputs into a single transaction</strong> (user owns the private key to each address) as proposed by Reid and Harrigan. Each line [...] is a grouping of public keys as illustrated in Figure 3:</p>
</blockquote>
<p><a href="https://i.sstatic.net/AwR7t.png" rel="nofollow noreferrer"><img src="https://i.sstatic.net/AwR7t.png" alt="Analyzing the Bitcoin Network: The First Four Years - Matthias Lischke and Benjamin Fabian, Institute of Information Systems, Humboldt-Universität zu Berlin, Spandauer Str. 1, 10178 Berlin, Germany (CC BY 4.0)" /></a></p>

CC BY-SA 3.0
2018-02-02T21:38:09.553Z
2018-02-02T21:46:32.670Z
2020-06-16T11:10:03.350Z
circulosmeos
<blockquote>
  <p>However, how do we know that a user created multiplie private keys if we are not that user?</p>
</blockquote>

<p>We can't. User can create keys using any computation mechanism(pen &amp; paper, abacus, etc.). Protocol is one-party and does not need any third-party(website, server, etc.)</p>

<blockquote>
  <p>some algorithm to group private keys belonging to each user. What it would be?</p>
</blockquote>

<p>Usually, they first apply Union-Find graph algorithms. After they do some analysis at this stage, they assume that in this reduced entity graph, all inputs to a transaction belong to the same entity. This was maybe true early-on in history of bitcoin, but joining coins is pretty common now. Receiver associated with certain senders only are created as self loops etc. The entity graph is kept on reducing, applying transitive, commutative, associative etc. closure on it and studied.</p>

CC BY-SA 3.0
2018-02-02T22:34:46.533Z
2018-02-02T22:34:46.533Z
skang404
<p>I will try to answer this, though not sure about the extent of it being held true.</p>

<p>It says:</p>

<blockquote>
  <p>Furthermore, multiple addresses can belong to a single user.</p>
</blockquote>

<p>It says "can" not "must"</p>

<p>Let me say this with an example.</p>

<p>There are say 5 transactions with transaction ID as: trans1, trans2, trans3, trans4 and trans5</p>

<p>The addresses involved are addr1, addr2, addr3, addr4, addr5, addr6 &amp; addr7</p>

<p>Initial Balances:</p>

<p>addr1: 1 BTC</p>

<p>addr2: 2 BTC</p>

<p>addr3: 1 BTC</p>

<p>addr4: 0 BTC</p>

<p>addr5: 0 BTC</p>

<p>addr6: 0 BTC</p>

<p>addr7: 0 BTC</p>

<p>Transactions occured (considering negligible fees):</p>

<p>trans1: addr1 (1BTC) > addr6 (1BTC)</p>

<p>trans2: addr2 (2BTC) > addr5 (2BTC)</p>

<p>trans3: addr3 (1BTC) > addr4 (1BTC)</p>

<p>trans4: addr4 (1BTC) &amp; addr5 (1BTC) > addr7 (2BTC)</p>

<p>trans5: addr5 (1BTC) &amp; addr6 (1BTC) > addr7 (2BTC)</p>

<p>Final Balances:</p>

<p>addr1: 0 BTC</p>

<p>addr2: 0 BTC</p>

<p>addr3: 0 BTC</p>

<p>addr4: 0 BTC</p>

<p>addr5: 0 BTC</p>

<p>addr6: 0 BTC</p>

<p>addr7: 4 BTC</p>

<p>Now considering transaction trans1, trans2 &amp; trans3 to have occured due to some payment settlement. And that gives us no clue whether these receiving addresses are held by a single person or not.</p>

<p>Whereas for the transaction trans4 &amp; trans5 to have occured, the user requires the private key of address addr4, addr5 &amp; addr6. Thus giving us a hint that this "can" (not must) belong to a single person.</p>

<p>Another assuring thing about this belongs to a single person is, these converges to a single address, i.e. addr7. Though this might be someone else, and might be another payment settlement.</p>

<p>Thus, the data analysis paper says:</p>

<blockquote>
  <p>Furthermore, multiple addresses "can" belong to a single user.</p>
</blockquote>

CC BY-SA 3.0
2018-02-01T07:59:57.653Z
2018-02-01T07:59:57.653Z
remedcu
<p>From what i know from what your asking, a person was able have multiple address if they make multiple of it or have a wallet which keeps multiple address in one place.</p>

CC BY-SA 3.0
2018-02-01T00:13:13.440Z
Comment if this is not what your looking for because I'm bit unsure what your asking
zhiyan114
CC BY-SA 3.0
2018-02-01T00:12:17.210Z
2018-02-01T00:12:17.210Z
zhiyan114
<p>I am reading a data analysis paper on bitcoin, and there is a phrase I do not get:</p>

<blockquote>
  <p>We use the Bitcoin transaction data set obtained from Stanford Network Analysis Project. All Bitcoin transactions are documented in a public ledger and are in the currency unit called the Bitcoin(BTC). The data set contains all Bitcoin transactions beginning from the network’s creation until April 7th, 2013. For each transaction, there can be multiple sender and receiver addresses. <strong>Furthermore, multiple addresses can belong to a single user</strong>.</p>
</blockquote>

<p>I do not get this last sentence. Yes, surely a user can create multiple private keys. However, how do we know that a user created multiplie private keys if we are not that user?</p>

<p>The dataset given in this paper is very large (6,336,769 users), so they must apply some algorithm to group private keys belonging to each user. What it would be?</p>

CC BY-SA 3.0
2018-02-01T00:00:44.440Z
I've deleted my answer as I'm clearly missing some context. Perhaps it's useful to add the link you comment to your question?
Pieter Wuille
<private-key><public-key><user-data>
How do we know that a user owns multiple private keys?
Rubertos
# How do we know that a user owns multiple private keys?

(Asked by: username_0 on 2018-01-31)

I am reading a data analysis paper on bitcoin, and there is a phrase I do not get:

> We use the Bitcoin transaction data set obtained from Stanford Network Analysis Project. All Bitcoin transactions are documented in a public ledger and are in the currency unit called the Bitcoin(BTC). The data set contains all Bitcoin transactions beginning from the network’s creation until April 7th, 2013. For each transaction, there can be multiple sender and receiver addresses. **Furthermore, multiple addresses can belong to a single user**.

I do not get this last sentence. Yes, surely a user can create multiple private keys. However, how do we know that a user created multiplie private keys if we are not that user?

The dataset given in this paper is very large (6,336,769 users), so they must apply some algorithm to group private keys belonging to each user. What it would be?

**Tags:** private-key, public-key, user-data

> **Comments:**
> **username_1**: I've deleted my answer as I'm clearly missing some context. Perhaps it's useful to add the link you comment to your question?  

---

## 4 answers

### Answer by username_2 on 2018-02-02. Score: 1

There are multiple articles available in internet which contain that paragraph. For example: [http://cs229.stanford.edu/proj2014...](http://cs229.stanford.edu/proj2014/Phillip%20Pham,Steven%20Li,%20Anomaly%20Detection%20in%20Bitcoin%20Network%20Using%20Unsupervised%20Learning%20Methods.pdf), <https://arxiv.org/pdf/1611.03942.pdf>, etc

Each one seems to attribute the origin of the data to different sources, but the numbers act as a fingerprint (**6,336,769 nodes and 28,143,065 edges**), so it can be traced back to a work by *Ivan Brugere* which seems to have been available in the past, but not now, at [compbio.cs.uic.edu](http://compbio.cs.uic.edu/%20data/bitcoin/), and from which [some docs remain at github](https://github.com/ivan-brugere/Bitcoin-Transaction-Network-Extraction/blob/master/README.pdf).

From them he refers to the work "[An Analysis of Anonymity in the
Bitcoin System](http://arxiv.org/pdf/1107.4524v2.pdf)" by *Fergal Reid and Martin Harrigan*:

> Suppose U is, at first, incomplete in the sense that each vertex represents a single public-key rather than a user and that each directed edge between a source and a target represents an input-output pair of a single transaction, where the input's public-key corresponds to the source and the output's public-key corresponds to the target. In order to perfect this network, **we need to contract each subset of vertices whose corresponding public-keys belong to a single user.**
>
> ... as noted by Nakamoto:
> "Some linking is still unavoidable with **multi-input transactions, which necessarily reveal that their inputs were owned by the same owner.** The risk is that if the owner of a key is revealed, linking could reveal other transactions that belonged to the same owner."

And closing the argument, in an extensive work covering the same dataset:

[Analyzing the Bitcoin Network: The First Four Years - *Matthias Lischke and Benjamin Fabian, Institute of Information Systems, Humboldt-Universität zu Berlin, Spandauer Str. 1, 10178 Berlin, Germany*](http://www.mdpi.com/1999-5903/8/1/7) (CC BY 4.0):

> The user information is organized by the second group of files [...], where **a “user” is a grouping of public keys that were used as inputs into a single transaction** (user owns the private key to each address) as proposed by Reid and Harrigan. Each line [...] is a grouping of public keys as illustrated in Figure 3:

[![Analyzing the Bitcoin Network: The First Four Years - Matthias Lischke and Benjamin Fabian, Institute of Information Systems, Humboldt-Universität zu Berlin, Spandauer Str. 1, 10178 Berlin, Germany (CC BY 4.0)](https://i.sstatic.net/AwR7t.png)](https://i.sstatic.net/AwR7t.png)


---

### Answer by username_3 on 2018-02-02. Score: 1

> However, how do we know that a user created multiplie private keys if we are not that user?

We can't. User can create keys using any computation mechanism(pen & paper, abacus, etc.). Protocol is one-party and does not need any third-party(website, server, etc.)

> some algorithm to group private keys belonging to each user. What it would be?

Usually, they first apply Union-Find graph algorithms. After they do some analysis at this stage, they assume that in this reduced entity graph, all inputs to a transaction belong to the same entity. This was maybe true early-on in history of bitcoin, but joining coins is pretty common now. Receiver associated with certain senders only are created as self loops etc. The entity graph is kept on reducing, applying transitive, commutative, associative etc. closure on it and studied.


---

### Answer by username_4 on 2018-02-01. Score: 0

I will try to answer this, though not sure about the extent of it being held true.

It says:

> Furthermore, multiple addresses can belong to a single user.

It says "can" not "must"

Let me say this with an example.

There are say 5 transactions with transaction ID as: trans1, trans2, trans3, trans4 and trans5

The addresses involved are addr1, addr2, addr3, addr4, addr5, addr6 & addr7

Initial Balances:

addr1: 1 BTC

addr2: 2 BTC

addr3: 1 BTC

addr4: 0 BTC

addr5: 0 BTC

addr6: 0 BTC

addr7: 0 BTC

Transactions occured (considering negligible fees):

trans1: addr1 (1BTC) > addr6 (1BTC)

trans2: addr2 (2BTC) > addr5 (2BTC)

trans3: addr3 (1BTC) > addr4 (1BTC)

trans4: addr4 (1BTC) & addr5 (1BTC) > addr7 (2BTC)

trans5: addr5 (1BTC) & addr6 (1BTC) > addr7 (2BTC)

Final Balances:

addr1: 0 BTC

addr2: 0 BTC

addr3: 0 BTC

addr4: 0 BTC

addr5: 0 BTC

addr6: 0 BTC

addr7: 4 BTC

Now considering transaction trans1, trans2 & trans3 to have occured due to some payment settlement. And that gives us no clue whether these receiving addresses are held by a single person or not.

Whereas for the transaction trans4 & trans5 to have occured, the user requires the private key of address addr4, addr5 & addr6. Thus giving us a hint that this "can" (not must) belong to a single person.

Another assuring thing about this belongs to a single person is, these converges to a single address, i.e. addr7. Though this might be someone else, and might be another payment settlement.

Thus, the data analysis paper says:

> Furthermore, multiple addresses "can" belong to a single user.


---

### Answer by username_5 on 2018-02-01. Score: 0

From what i know from what your asking, a person was able have multiple address if they make multiple of it or have a wallet which keeps multiple address in one place.

> **Comments:**
> **username_5**: Comment if this is not what your looking for because I'm bit unsure what your asking  

---

