Collusion-Resistant Domain-Specific Pseudonymous Signatures
Julien Bringer, Hervé Chabanne, Alain Patey, Télécom Paristech · 2013
Abstract. At ISC 2012, Bender et al. introduced the notion of domainspecific pseudonymous signatures for ID documents. With this primitive, a user can sign with domain-specific pseudonyms, that cannot be linked across domains but that are linkable in a given domain. However, their security model assumes non-collusion of malicious users, which is a strong assumption. We therefore propose improvements to their construction. Our main contribution is a new pseudonymous signature scheme based on group signatures that is collusion-resistant. 1