An ID-based Anonymous-message Anonymous Signature Scheme
Anonymity is an important cryptographical tool to protect users privacy and identity. In a general ring signature scheme, a member of the ring anonymously produces a signature δ on a message, where the actual identity of the signer is unknown and the signed message is known for a verifier. However, in some cases, to protect the signers benefit, we do not hope that a verifier know which message is signed. If necessary, the identity of the signer and the signed message can be revealed. To address it, in this work, we extend ring signature notion to present a novel notion: anonymous-message anonymous signature scheme. In this kind of signature, it allows that a member of the ring produces a signature on one of several messages on behalf of the ring. Not only is the identity of the signer kept anonymous, but also the signed message is kept anonymous. After a concrete scheme is given, we show that the security of the scheme is closely related to the RSA problem, which does not rely on (the rather new and untested ) assumptions related to bilinear maps.
anonymous signature anonymous message ring signature security analysis
Jianhong Zhang Yixian Yang
Institute of Imagine Process and Pattern Recognize North China University of Technology Beijing, Chi State Key Laboratory of Networking and Switching Technology Beijing University of Posts and Telecomm
国际会议
武汉
英文
1144-1147
2009-11-18（万方平台首次上网日期，不代表论文的发表时间）