Group Signature with Deniability: How to Disavow a Signature

  • ISHIDA Ai
    Department of Mathematical and Computing Sciences, Tokyo Institute of Technology National Institute of Advanced Industrial Science and Technology
  • EMURA Keita
    National Institute of Information and Communications Technology
  • HANAOKA Goichiro
    National Institute of Advanced Industrial Science and Technology
  • SAKAI Yusuke
    National Institute of Advanced Industrial Science and Technology
  • TANAKA Keisuke
    Department of Mathematical and Computing Sciences, Tokyo Institute of Technology

抄録

<p>Group signatures are a class of digital signatures with enhanced privacy. By using this type of signature, a user can sign a message on behalf of a specific group without revealing his identity, but in the case of a dispute, an authority can expose the identity of the signer. However, it is not always the case that we need to know the specific identity of a signature. In this paper, we propose the notion of deniable group signatures, where the authority can issue a proof showing that the specified user is NOT the signer of a signature, without revealing the actual signer. We point out that existing efficient non-interactive zero-knowledge proof systems cannot be straightforwardly applied to prove such a statement. We circumvent this problem by giving a fairly practical construction through extending the Groth group signature scheme (ASIACRYPT 2007). In particular, a denial proof in our scheme consists of 96 group elements, which is about twice the size of a signature in the Groth scheme. The proposed scheme is provably secure under the same assumptions as those of the Groth scheme.</p>

収録刊行物

参考文献 (32)*注記

もっと見る

関連プロジェクト

もっと見る

詳細情報 詳細情報について

問題の指摘

ページトップへ