群签名成员撤销综述

摘要

Group signature is a central crypto system with many applications,since it combines both anonymity and traceability.To use it in reality,a crucial issue is how to revoke the sign right of some members.For example,a member's signing key may be lost or stolen,or the member leaves the organization deliberately.The security models of membership revocation for group signature base on security properties and ideal functionality are surveyed.The main models and methods to achieve revocation and the concrete representative schemes are also surveyed.The efficiency and mathematical assumptions of different revocable group signature schemes are compared with each other.And other more flexible ways for revocation of signing right and revocation of signature are surveyed.Further research directions for group signature membership revocation are also given.%由于同时具有匿名与可追踪的良好特性,群签名有着广泛的应用,是具有中心地位的密码系统;要把群签名应用于实际中,一个非常重要的问题是如何撤销群成员的签名权利,比如出现某成员密钥丢失、被盗或退出组织等情况;综述了群签名成员撤销的基于安全性质和基于理想功能体的安全模型定义、实现群签名成员撤销的主要模型与方法及各自的代表性具体方案,对各种可撤销群签名方案的效率及其所基于的数学假设进行了比较,也综述了其它的更为灵活的成员签名权利及签名撤销方式,并提出群签名成员撤销值得进一步研究的方向.