CryptoDB
Accumulators from Bilinear Pairings and Applications to ID-based Ring Signatures and Group Membership Revocation
Authors: |
- Lan Nguyen
|
Download: |
- URL: http://eprint.iacr.org/2005/123
- Search ePrint
- Search Google
|
Abstract: |
We propose a dynamic accumulator scheme from bilinear
pairings, whose security is based on the Strong Diffie-Hellman
assumption. We show applications of this accumulator in
constructing an identity-based (ID-based) ring signature scheme
with constant-size signatures and its interactive counterpart, and
providing membership revocation to group signature, traceable
signature and identity escrow schemes and anonymous credential
systems. The ID-based ring signature scheme and the group
signature scheme have extremely short signature sizes. The size of
our group signatures with membership revocation is only half the
size of the well-known ACJT00 scheme, which does not provide
membership revocation. The schemes do not require trapdoor, so
system parameters can be shared by multiple groups belonging to
different organizations. All schemes proposed are provably secure
in formal models. We generalize the definition of accumulators to
model a wider range of practical accumulators. We provide formal
models for ID-based ad-hoc anonymous identification schemes and
identity escrow schemes with membership revocation, based on existing ones. |
BibTeX
@misc{eprint-2005-12459,
title={Accumulators from Bilinear Pairings and Applications to ID-based Ring Signatures and Group Membership Revocation},
booktitle={IACR Eprint archive},
keywords={public-key cryptography / Dynamic accumulators, ID-based, ring signatures, ad-hoc anonymous identification, group signatures, identity escrow, membership revocation, privacy and anonymity.},
url={http://eprint.iacr.org/2005/123},
note={An extended abstract appears in CT-RSA 2005. ldn01@uow.edu.au 13460 received 27 Apr 2005, last revised 7 Nov 2006},
author={Lan Nguyen},
year=2005
}