可选择关联和可转换的环签名方案研究

环签名因其无条件匿名性被广泛应用于匿名认证、匿名电子投票等特殊应用中,为了避免重复投票,需要验证两次签名之间是否存在关联性,当需要揭秘签名者的匿名身份时,环签名需要转换成普通签名。为实现这两个功能,文献15]提出了一个可选择链接可转换的环签名方案。但该方案在环签名生成阶段,签名者需要使用环中其他成员的私钥x_i,而其他成员的私钥是保密的,不能独立计算A_i,继而签名者一人无法完成环签名的生成和算法的可转换验证。本文针对文献15]的不足,提出了一个可选择关联和可转换的环签名方案。与同类方案相比,本文方案不仅具有强匿名性和选择关联性,还具有较小的计算开销。

SELECTIVELY LINKABLE AND CONVERTIBLE RING SIGNATURE SCHEME

Ring signatures are widely used in anonymous authentication, anonymous electronic voting and other special applications because of its unconditional anonymity. In order to avoid repeated voting, it is necessary to verify whether two signatures are relevant or not. When it is necessary to reveal the anonymous identity of the signer, ring signature needs to be converted into ordinary signature. In order to achieve these two functions, a selectively linkable and convertible ring signature scheme is proposed in literature15]. However, in the phase of ring signature generation, the signer needs to use the private key of other members in the ring, while the private key of other members is confidential. Therefore, the signer can not calculate A_i independently, and then the signer can not complete the generation of ring signature and the convertible verification of the algorithm. In this paper, a ring signature scheme with selective linkability and convertibility is proposed. Compared with the similar schemes, the proposed scheme not only has strong anonymity and selective linkability, but also has less computational overhead.