An anonymous authentication signature system constituted by mutually connecting user means for generating and outputting signature data for a document inputted by a user and verification means for verifying whether or not the signature data generated by the user device is proper and outputting a result thereof, wherein: the user means includes first recording means for storing first system parameters as respective first parameters given in advance, a disclosure public key, a user public key, a user private key, a member certificate, and an attribute certificate, input/output means for receiving input of the document from the user and an attribute the user intends to disclose, cryptograph generating means for generating a cryptograph based on the inputted document, the attribute to be disclosed, and each of the first parameters, signature text generating means for generating a zero-knowledge signature text from the generated cryptograph, and signature output means for outputting the cryptograph and the zero-knowledge signature text as the signature data; the verification means includes second recording means for storing second system parameters as respective second parameters given in advance, the disclosure public key, the user public key, and the attribute certificate, input receiving means for receiving the input of the document and the signature data from the user means, and zero-knowledge certification verifying means for judging whether or not a zero-knowledge certification text is acceptable by verifying the zero-knowledge certification text contained in the signature data by using each of the second parameters, and receiving the signature data when judged as acceptable; the user public key and the attribute certificate are generated by using a same power; and the signature text generating means of the user means combines a part of the user public key and a part of the attribute certificate corresponding to the attribute that is not disclosed to generate the zero-knowledge signature text showing that the combined data satisfies an expression defined in advance. the user means includes first recording means for storing first system parameters as respective first parameters given in advance, a disclosure public key, a user public key, a user private key, a member certificate, and an attribute certificate, input/output means for receiving input of the document from the user and an attribute the user intends to disclose, cryptograph generating means for generating a cryptograph based on the inputted document, the attribute to be disclosed, and each of the first parameters, signature text generating means for generating a zero-knowledge signature text from the generated cryptograph, and signature output means for outputting the cryptograph and the zero-knowledge signature text as the signature data; first recording means for storing first system parameters as respective first parameters given in advance, a disclosure public key, a user public key, a user private key, a member certificate, and an attribute certificate, input/output means for receiving input of the document from the user and an attribute the user intends to disclose, cryptograph generating means for generating a cryptograph based on the inputted document, the attribute to be disclosed, and each of the first parameters, signature text generating means for generating a zero-knowledge signature text from the generated cryptograph, and signature output means for outputting the cryptograph and the zero-knowledge signature text as the signature data; the verification means includes second recording means for storing second system parameters as respective second parameters given in advance, the disclosure public key, the user public key, and the attribute certificate, input receiving means for receiving the input of the document and the signature data from the user means, and zero-knowledge certification verifying means for judging whether or not a zero-knowledge certification text is acceptable by verifying the zero-knowledge certification text contained in the signature data by using each of the second parameters, and receiving the signature data when judged as acceptable; second recording means for storing second system parameters as respective second parameters given in advance, the disclosure public key, the user public key, and the attribute certificate, input receiving means for receiving the input of the document and the signature data from the user means, and zero-knowledge certification verifying means for judging whether or not a zero-knowledge certification text is acceptable by verifying the zero-knowledge certification text contained in the signature data by using each of the second parameters, and receiving the signature data when judged as acceptable;