A short Verifier-Local Revocation group signature scheme with backward unlinkability

Toru Nakanishi, Nobuo Funabiki

Research output: Contribution to journalArticlepeer-review

20 Citations (Scopus)


Previously Verifier-Local Revocation (VLR) group signature schemes from bilinear maps were proposed. In VLR schemes, only verifiers are involved in the revocation of a member, while signers are not. Thus, the VLR schemes are suitable for mobile environments. Furthermore, the previously proposed schemes satisfy the important backward unlinkability. This means that even after a member is revoked, signatures produced by the member before the revocation remain anonymous. This property is needed in case of a voluntary leave of a member or in case of a key loss. However, in the previous schemes, signatures become long, due to the adopted assumption, which should be improved in order to apply the schemes to the mobile environments. In this paper an improved VLR scheme is proposed with the shorter group signatures. This is achieved by using a different assumption, DLDH assumption, and improving zeroknowledge proofs in the group signatures. The length of the proposed group signatures is reduced to about 53% of that of the previous ones.

Original languageEnglish
Pages (from-to)1793-1802
Number of pages10
JournalIEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences
Issue number9
Publication statusPublished - Sept 2007


  • Backward unlinkability
  • Bilinear maps
  • DLDH assumption
  • Group signature
  • Revocation

ASJC Scopus subject areas

  • Signal Processing
  • Computer Graphics and Computer-Aided Design
  • Electrical and Electronic Engineering
  • Applied Mathematics


Dive into the research topics of 'A short Verifier-Local Revocation group signature scheme with backward unlinkability'. Together they form a unique fingerprint.

Cite this