Group Signature Scheme with Signature Tracing and Its Application to an Electronic Coupon System (特集 21世紀のコンピュータセキュリティ技術)

概要

論文の詳細を見る
A group signature scheme allows a group member to sign messages on the group's behalf in such a way that the signature does not reveal the member's identity. It also has the property of unlinkability, which means that it is infeasible to determine whether two signatures were made by the same member. In the scheme, only a designated trusted third party can identify the member who issued a given signature. However, given a member's identity, this third party cannot trace signatures issued by the member, while the anonymity and unlinkability of unrelated members' signatures are not corrupted. We call the latter type of tracing signature tracing. In this paper, a group signature scheme with signature tracing is proposed. In some application systems, signature tracing is useful for preventing illegal users from accessing a service. As an application of the group signature scheme, we propose an electronic coupon system, where the properties of anonymity and unlinkability are satisfied in normal cases, and, in exceptional cases, the anonymity of payments can be revoked in both directions from the payment to the withdrawal, leading to the customer's identity, and from the withdrawal to the payment.
一般社団法人情報処理学会の論文
2001-08-15