Patent ID: 11973884

Abstract:
An anonymous signature system in which a signature σ is anonymized by an agent specified by a signer, includes computers each including a memory and a processor configured to, from a security parameter, generate a system parameter ρ independent of the agent; from ρ, generate an agent secret key w and an agent public key gA; from ρ, generate a secret key x and a public key y of the signer; from x, a message m on which σ is to be put, and gA, generate σ to be put on m; from an identifier i of the signer, w, σ, a ring L representing a group to which the signer belongs, a list yL of public keys y of signers in L, and m, generate a ring signature σ′ by anonymizing σ; and from L, yL, m, and σ′, output a verification result b form.