user5406: Very often in various online discussions, people cite the word "cash" from the Bitcoin whitepaper title as evidence that Bitcoin should be used for everyday transactions.
I've seen mentions that the term "Electronic Cash" as it appears in the whitepaper title has a very specific meaning in the cypherpunk/computer science community. I've tried looking for a definition online, but I couldn't readily find a more elaborate definition of the term.
What is the meaning of "Electronic Cash" in the computer science lingo?

user208: My assumption is that most references to the concept of electronic cash before Bitcoin refer to Chaumian tokens, or at least systems with properties like it.
Chaumian tokens are created by a central server, following this procedure. As an example, say party A has a coin (a random string R1, plus a valid signature S1 from the central server), and wishes to pay party B:

Party A sends the coin (R1, S1) to B.
Party B anonymously connects to the central server (for example though Tor), and hands the server (R1, S1), and also sends a newly generated random string R2 in blinded form (R2').
The central server verifies that S1 is a valid signature, and that R1 was never spent before, marks R1 as spent in a (growing) database, and creates a signature S2' on the blinded string R2', sending it back to B.
B now removes the blinding from S2', and obtains a new valid coin (R2,S2), which nobody else has.

The security of this scheme relies on the server not knowing what it is signing. So it cannot track (even pseudonymous) ownership of coins. In fact, the server doesn't actually know what coins exist at all, just which ones have been spent.
Schemes like this have very different properties than Bitcoin (and in fact would be a nice complement to it):

It is extremely centralized (everything depends on the central server).
As long as anonymously connecting to the server is possible, it has very good privacy. Nobody (including the server) basically observes any transaction except their own.
Is very scalable (only the server needs to create many signatures, and maintain a database of spent coins).


user46091: Digital cash is supposed to be a digital equivalent to our legacy physical cash (coins and banknotes). 
Therefor digital cash needs to fulfill certain criteria:

payments can be made without a middleman
the receiver has a means of verifying the transaction and be sure that they have been paid
the transaction cannot be reversed

These criteria are met no matter if I hand you a banknote or send you a Bitcoin transaction. They also create privacy and non-confiscatability as no middlemen carry out the transaction for you or hold your money for you.

5406: <p>Very often in various online discussions, people cite the word "cash" from the Bitcoin whitepaper title as evidence that Bitcoin should be used for everyday transactions.</p>

<p>I've seen mentions that the term "Electronic Cash" as it appears in the whitepaper title has a very specific meaning in the cypherpunk/computer science community. I've tried looking for a definition online, but I couldn't readily find a more elaborate definition of the term.</p>

<p><strong>What is the meaning of "Electronic Cash" in the computer science lingo?</strong></p>
 208: <p>My assumption is that most references to the concept of electronic cash before Bitcoin refer to Chaumian tokens, or at least systems with properties like it.</p>

<p>Chaumian tokens are created by a central server, following this procedure. As an example, say party A has a coin (a random string R1, plus a valid signature S1 from the central server), and wishes to pay party B:</p>

<ul>
<li>Party A sends the coin (R1, S1) to B.</li>
<li>Party B anonymously connects to the central server (for example though Tor), and hands the server (R1, S1), and also sends a newly generated random string R2 in blinded form (R2').</li>
<li>The central server verifies that S1 is a valid signature, and that R1 was never spent before, marks R1 as spent in a (growing) database, and creates a signature S2' on the blinded string R2', sending it back to B.</li>
<li>B now removes the blinding from S2', and obtains a new valid coin (R2,S2), which nobody else has.</li>
</ul>

<p>The security of this scheme relies on the server not knowing what it is signing. So it cannot track (even pseudonymous) ownership of coins. In fact, the server doesn't actually know what coins exist at all, just which ones have been spent.</p>

<p>Schemes like this have <strong>very</strong> different properties than Bitcoin (and in fact would be a nice complement to it):</p>

<ul>
<li>It is extremely centralized (everything depends on the central server).</li>
<li>As long as anonymously connecting to the server is possible, it has very good privacy. Nobody (including the server) basically observes any transaction except their own.</li>
<li>Is very scalable (only the server needs to create many signatures, and maintain a database of spent coins).</li>
</ul>
 46091: <p>Digital cash is supposed to be a digital equivalent to our legacy physical cash (coins and banknotes). </p>

<p>Therefor digital cash needs to fulfill certain criteria:</p>

<ul>
<li>payments can be made without a middleman</li>
<li>the receiver has a means of verifying the transaction and be sure that they have been paid</li>
<li>the transaction cannot be reversed</li>
</ul>

<p>These criteria are met no matter if I hand you a banknote or send you a Bitcoin transaction. They also create privacy and non-confiscatability as no middlemen carry out the transaction for you or hold your money for you.</p>
