Short DL-based Blacklistable Ring Signatures from DualRing
Short DL-based Blacklistable Ring Signatures from DualRing
复制标题
DOI：
10.1109/candar57322.2022.00026
复制
发表时间：
2022-11
期刊：
影响因子：
--
通讯作者：
T. Nakanishi;Atsuki Iriboshi;Katsunobu Imai
中科院分区：
文献类型：
--
作者：
T. Nakanishi;Atsuki Iriboshi;Katsunobu Imai
环签名作为一种适用于分散环境的增强隐私的认证方案，得到了广泛的研究。在环签名中，每个用户都可以选择称为环的任意特定用户集（由公钥指定），并作为其中一个用户匿名签名消息。然而，在匿名认证的应用中，用户可能会因为匿名性而对服务做出不当行为，因此需要一种机制来排除匿名的不当行为用户。然而，在现有的环签名方案中，需要一个可信实体来公开用户的身份，但它不适合分散的环境。另一方面，作为另一种类型的匿名认证，提出了一种分散的黑名单匿名证书系统，其中匿名行为不端的用户可以被检测到并通过黑名单排除。但是，基于DL的实例化需要$O（N）$证明大小来获得环大小$N$。在基于DL的环签名研究中，提出了一个签名长度为O（\log N）的高效的环签名方案，称为DualRing。本文提出了一个基于DL的可黑名单环签名方案，该方案除了具有短的$O（\log N）$签名长度外，还实现了黑名单机制以排除行为不端的用户。
As one of privacy-enhancing authentications suitable for decentralized environments, ring signatures have intensively been researched. In ring signatures, each user can choose any ad-hoc set of users (specified by public keys) called a ring, and anonymously sign a message as one of the users. However, in applications of anonymous authentications, users may misbehave the service due to the anonymity, and thus a mechanism to exclude the anonymous misbehaving users is required. However, in the existing ring signature scheme, a trusted entity to open the identity of the user is needed, but it is not suitable for the decentralized environments. On the other hand, as another type of anonymous authentications, a decentralized blacklistable anonymous credential system is proposed, where anonymous misbehaving users can be detected and excluded by a blacklist. However, the DL-based instantiation needs $O(N)$ proof size for the ring size $N$. In the research line of the DL-based ring signatures, an efficient scheme with $O(\log N)$ signature size, called DualRing, is proposed. In this paper, we propose a DL-based blacklistable ring signature scheme extended from DualRing, where in addition to the short $O(\log N)$ signature size, the blacklisting mechanism is realized to exclude misbehaving users.