TY - GEN
T1 - Revocable group signatures with compact revocation list using accumulators
AU - Nakanishi, Toru
AU - Funabiki, Nobuo
N1 - Funding Information:
This work was supported by JSPS KAKENHI Grant Number 25330153.
Publisher Copyright:
© Springer International Publishing Switzerland 2014.
PY - 2014
Y1 - 2014
N2 - Group signatures allow a group member to anonymously sign a message on behalf of the group. One of the important issues is the revocation, and lots of revocable schemes have been proposed so far. The scheme recently proposed by Libert et al. achieves that O(1) or O(logN) efficiency except for the revocation list size (also the revocation cost), for the total number of members N and the number of revoked members R. However, since a signature is required for each subset in the used subset difference method, the size is about 900RBytes in the 128-bit security. In the case of R = 100,000, it amounts to about 80 MB. In this paper, we extend the scheme to reduce the revocation list (also the revocation cost). In the proposed scheme, an extended accumulator accumulates T subsets, which is signed for the revocation list. The revocation list size is reduced by 1/T , although the public key size, membership certificate size and the cost of a witness computation needed for signing increase related to T.
AB - Group signatures allow a group member to anonymously sign a message on behalf of the group. One of the important issues is the revocation, and lots of revocable schemes have been proposed so far. The scheme recently proposed by Libert et al. achieves that O(1) or O(logN) efficiency except for the revocation list size (also the revocation cost), for the total number of members N and the number of revoked members R. However, since a signature is required for each subset in the used subset difference method, the size is about 900RBytes in the 128-bit security. In the case of R = 100,000, it amounts to about 80 MB. In this paper, we extend the scheme to reduce the revocation list (also the revocation cost). In the proposed scheme, an extended accumulator accumulates T subsets, which is signed for the revocation list. The revocation list size is reduced by 1/T , although the public key size, membership certificate size and the cost of a witness computation needed for signing increase related to T.
KW - Accumulators
KW - Anonymity
KW - Group signatures
KW - Revocations
UR - http://www.scopus.com/inward/record.url?scp=84911180899&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=84911180899&partnerID=8YFLogxK
U2 - 10.1007/978-3-319-12160-4_26
DO - 10.1007/978-3-319-12160-4_26
M3 - Conference contribution
AN - SCOPUS:84911180899
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 435
EP - 451
BT - Information Security and Cryptology - ICISC 2013 - 16th International Conference, Revised Selected Papers
A2 - Lee, Hyang-Sook
A2 - Han, Dong-Guk
PB - Springer Verlag
T2 - 10th IFIP WG 11.9 International Conference on Digital Forensics
Y2 - 8 January 2014 through 10 January 2014
ER -