A short verifier-local revocation group signature scheme with backward unlinkability

Toru Nakanishi, Nobuo Funabiki

Research output: Chapter in Book/Report/Conference proceedingConference contribution

44 Citations (Scopus)


Previously Verifier-Local Revocation (VLR) group signature schemes from bilinear maps were proposed. In VLR schemes, only verifiers are involved in the revocation of a member, while signers are not involved in the revocation. Thus, the schemes are suitable for mobile environments. Furthermore, the previously proposed schemes satisfy an important property, the backward unlinkability. It means that even after a member is revoked, signatures produced by the member before the revocation remain anonymous. This property is needed in case a member leaves voluntarily or in case of a stolen key. In this paper an improved scheme is proposed, where the group signatures are shorter. This is achieved using a different assumption, DLDH assumption, and improving zero-knowledge proofs in the group signatures. The length of the proposed group signatures is about 53% of that of the previous ones.

Original languageEnglish
Title of host publicationAdvances in Information and Computer Security - First International Workshop on Security, IWSEC 2006, Proceedings
PublisherSpringer Verlag
Number of pages16
ISBN (Print)3540476997, 9783540476993
Publication statusPublished - 2006
Event1st International Workshop on Security, IWSEC 2006 - Kyoto, Japan
Duration: Oct 23 2006Oct 24 2006

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume4266 LNCS
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349


Other1st International Workshop on Security, IWSEC 2006


  • Backward unlinkability
  • Bilinear maps
  • DLDH assumption
  • Group signature
  • Revocation

ASJC Scopus subject areas

  • Theoretical Computer Science
  • Computer Science(all)


Dive into the research topics of 'A short verifier-local revocation group signature scheme with backward unlinkability'. Together they form a unique fingerprint.

Cite this