A group signature scheme is a method for allowing a member of a group to anonymously sign a message on behalf of the group. The concept was first introduced by David Chaum and Eugene van Heyst in 1991. For example, a group signature scheme could be used by an employee of a large company where it is sufficient for a verifier to know a message was signed by an employee, but not which particular employee signed it. Another application is for keycard access to restricted areas where it is inappropriate to track individual employee's movements, but necessary to secure areas to only employees in the group.
Essential to a group signature scheme is a group manager, who is in charge of adding group members and has the ability to reveal the original signer in the event of disputes. In some systems the responsibilities of adding members and revoking signature anonymity are separated and given to a membership manager and revocation manager respectively. Many schemes have been proposed, however all should follow these basic requirements:
Soundness and completeness
Valid signatures by group members always verify correctly, and invalid signatures always fail verification.
Unforgeable
Only members of the group can create valid group signatures.
Anonymity
Given a message and its signature, the identity of the individual signer cannot be determined without the group manager's secret key.
Traceability
Given any valid signature, the group manager should be able to trace which user issued the signature. (This and the previous requirement imply that only the group manager can break users' anonymity.)
Unlinkability
Given two messages and their signatures, we cannot tell if the signatures were from the same signer or not.
No framing
Even if all other group members (and the managers) collude, they cannot forge a signature for a non-participating group member.
Unforgeable tracing verification
The revocation manager cannot falsely accuse a signer of creating a signature he did not create.
Coalition resistance
A colluding subset of group members cannot generate a valid signature that the group manager cannot link to one of the colluding group members.[1]
The ACJT 2000,[1]BBS04,[2] and BS04 (in CCS) group signature schemes are some of the state of the art. (Note: this might be an incomplete list.)
Boneh, Boyen and Shacham published in 2004 (BBS04, Crypto04) a novel group signature scheme based on bilinear maps.[2] Signatures in this scheme are approximately the size of a standard RSA signature (around 200 bytes). The security of the scheme is proven in the random oracle model and relies on the Strong Diffie Hellman assumption (SDH) and a new assumption in bilinear groups called the Decision linear assumption (DLin).
A more formal definition that is geared towards provable security was given by Bellare, Micciancio and Warinschi.[3]
^ ab
Ateniese, Giuseppe; Camenisch, Jan; Joye, Marc; Tsudik, Gene (2000). "A Practical and Provably Secure Coalition-Resistant Group Signature Scheme". Advances in Cryptology — CRYPTO 2000(PDF). Lecture Notes in Computer Science. Vol. 1880. pp. 225–270. doi:10.1007/3-540-44598-6_16. ISBN 978-3-540-67907-3. Retrieved 24 June 2012.
^ ab
Boneh, Dan; Boyen, Xavier; Shacham, Hovav (2004). "Short Group Signatures" (PDF). Advances in Cryptology – CRYPTO 2004. Lecture Notes in Computer Science. Vol. 3152. Springer. pp. 227–242. doi:10.1007/978-3-540-28628-8_3. ISBN 978-3-540-22668-0. ISSN 0302-9743. Retrieved 24 June 2012.
^
Bellare, Mihir; Micciancio, Daniele; Warinschi, Bogdan (May 2003). "Foundations of Group Signatures: Formal Definitions, Simplified Requirements, and a Construction Based on General Assumptions". Advances in Cryptology — EUROCRYPT 2003. Lecture Notes in Computer Science. Vol. 2656. Warsaw, Poland: Springer. pp. 614–629. doi:10.1007/3-540-39200-9_38. ISBN 978-3-540-14039-9.
A groupsignature scheme is a method for allowing a member of a group to anonymously sign a message on behalf of the group. The concept was first introduced...
by Cascade Investment, Blackstone Group, and private equity firm Global Infrastructure Partners in May 2021. Signature Aviation originates to W. Wilson...
bilinear pairing for verification, and signatures are elements of an elliptic curve group. Working in an elliptic curve group provides some defense against index...
A time signature (also known as meter signature, metre signature, and measure signature) is a convention in Western music notation that specifies how many...
Signature Bank was an American full-service commercial bank headquartered in New York City and with 40 private client offices in the states of New York...
the set's members' keys was used to produce the signature. Ring signatures are similar to groupsignatures but differ in two key ways: first, there is no...
Schnorr signature is a digital signature produced by the Schnorr signature algorithm that was described by Claus Schnorr. It is a digital signature scheme...
A valid signature also guarantees that some parts of the email (possibly including attachments) have not been modified since the signature was affixed...
process digital images to extract spectral signatures at each pixel and use them to divide the image in groups of similar pixels (segmentation) using different...
cryptography, the Elliptic Curve Digital Signature Algorithm (ECDSA) offers a variant of the Digital Signature Algorithm (DSA) which uses elliptic-curve...
A signature weapon (or trademark weapon or weapon of choice) is one commonly identified with a certain group or, in the case of literature, epic poems...
A gene signature or gene expression signature is a single or combined group of genes in a cell with a uniquely characteristic pattern of gene expression...
A signature block (often abbreviated as signature, sig block, sig file, .sig, dot sig, siggy, or just sig) is a personalized block of text automatically...
ABC Signature is an American television production studio and the flagship production arm of the American Broadcasting Company, which is a subsidiary...
An undeniable signature is a digital signature scheme which allows the signer to be selective to whom they allow to verify signatures. The scheme adds...
XML Signature (also called XMLDSig, XML-DSig, XML-Sig) defines an XML syntax for digital signatures and is defined in the W3C recommendation XML Signature...
In mathematics, the signature (v, p, r) of a metric tensor g (or equivalently, a real quadratic form thought of as a real symmetric bilinear form on a...
Signature Global is a publicly-held real estate development company in India. It was established in 2014 and is headquartered in Gurgaon, Delhi. It operates...
The Digital Signature Algorithm (DSA) is a public-key cryptosystem and Federal Information Processing Standard for digital signatures, based on the mathematical...
A signature song is the one song (or, in some cases, one of a few songs) that a popular and well-established recording artist or band is most closely...
repertoire of a dolphin. Each dolphin has a distinct signature whistle that other members of its social group use to individually identify the whistler. They...
infrastructure services, in June 2006. In July 2006, Entrust acquired Business Signatures Corporation, a supplier of non-invasive fraud detection solutions[buzzword]...
stage theater in New York Signature Theatres, a chain of movie theaters bought and rebranded by the Regal Entertainment Group in 2004 This disambiguation...
for eIDAS is a data container that is used to hold a group of file objects and digital signatures and/or time assertions that are associated to those objects...
the Meyer signature cocycle, introduced by Meyer (1973). is an integer-valued 2-cocyle on a symplectic group that describes the signature of a fiber...
Global Information