Group Signatures with Verifier-Local Revocation and Backward Unlinkability in the Standard Model

Benoît Libert (1) , Damien Vergnaud (2, 3)

1 UCL Crypto Group - Microelectronics laboratory
2 CASCADE - Construction and Analysis of Systems for Confidentiality and Authenticity of Data and Entities
3 LIENS - Laboratoire d'informatique de l'école normale supérieure

Group signatures allow users to anonymously sign messages in the name of a group. Membership revocation has always been a critical issue in such systems. In 2004, Boneh and Shacham formalized the concept of group signatures with verifier-local revocation where revocation messages are only sent to signature verifiers (as opposed to both signers and verifiers). This paper presents an efficient {verifier-local revocation group signature} (VLR-GS) providing backward unlinkability (i.e. previously issued signatures remain anonymous even after the signer's revocation) with a security proof in the standard model (i.e. without resorting to the random oracle heuristic).

Mots clés: Group signatures; veri er-local revocation; bilinear maps; backward unlinkability; standard model

Domaines: Cryptographie et sécurité [cs.CR]

Benoît Libert, Damien Vergnaud. Group Signatures with Verifier-Local Revocation and Backward Unlinkability in the Standard Model. International Conference on Cryptology And Network Security, CANS 2009, Dec 2009, Kanazawa, Japan. pp.498-517, ⟨10.1007/978-3-642-10433-6_34⟩. ⟨inria-00577255⟩