Universal Designated-Verifier Signatures

Motivated by privacy issues associated with dissemination of signed digital certificates, we define a new type of signature scheme called a `Universal Designated-Verifier Signature' (UDVS). A UDVS scheme can function as a standard publicly-verifiable digital signature but has additional functionality which allows any holder of a signature (not necessarily the signer) to designate the signature to any desired designated-verifier (using the verifier's public key). Given the designated-signature, the designated-verifier can verify that the message was signed by the signer, but is unable to convince anyone else of this fact. We propose an efficient deterministic UDVS scheme constructed using any bilinear group-pair. Our UDVS scheme functions as a standard Boneh-Lynn-Shacham (BLS) signature when no verifierdesignation is performed, and is therefore compatible with the key-generation, signing and verifying algorithms of the BLS scheme. We prove that our UDVS scheme is secure in th...

• Type: Conference
• Year: 2003
• Where: ASIACRYPT
• Authors: Ron Steinfeld, Laurence Bull, Huaxiong Wang, Josef Pieprzyk
• Keywords: ASIACRYPT 2003, Cryptology, Deterministic Udvs Schemes, Signatures, Udvs Schemes