ID-based Restrictive Partially Blind Signatures and Applications.
Xiaofeng Chen, Fangguo Zhang, Shengli Liu · 2005
Abstract. Restrictive blind signatures allow a recipient to receive a blind signature on a message not known to the signer but the choice of message is restricted and must conform to certain rules. Partially blind signatures allow a signer to explicitly include necessary information (expiration date, collateral conditions, or whatever) in the resulting signatures under some agreement with receiver. Restrictive partially blind signatures incorporate the advantages of these two blind signatures. The existing restrictive partially blind signature scheme was constructed under certificate-based (CA-based) public key systems. In this paper we follow Brand's construction to propose the first identity-based (ID-based) restrictive blind signature scheme from bilinear pairings. Furthermore, we first propose an ID-based restrictive partially blind signature scheme, which is provably secure in the random oracle model. As an application, we use the proposed signature scheme to build an untraceable off-line electronic cash system followed Brand's construction. Key words: ID-based systems, Blind signatures, Bilinear pairings. 1 Introduction Blind signatures, introduced by Chaum [10], allow a recipient to obtain a signature on message mwithout revealing anything about the message to the signer. Blind signatures play an important role in a plenty of applications such as electronic voting, electronic cash schemes where anonymityis of great concern. About the formal definition and security of blind signature schemes, refer to [14, 16-18].Restrictive blind signatures, firstly introduced by Brands [5, 6], which allow a recipient to receive a blind signature on a message not known to the signer but the choice of the messageis restricted and must conform to certain rules. Furthermore, he proposed a highly efficient electronic cash system, where the bank ensures that the user is restricted to embed his identityin the resulting blind signature.