We briefly mention the components that interact with the processes we describe. Briefly, a participant has a purse, which has a database of coins. The issuer has a coin database and a participant database. These indicate the status of a coin, including the withdrawer ID if anonymity was not requested. A schematic view of the issuer's coin database is shown in Figure 3.
The issuer has a secure cryptographic module for coin generation. The coin-generation key is hardware-protected inside this module.
