Paper 2005/123

Accumulators from Bilinear Pairings and Applications to ID-based Ring Signatures and Group Membership Revocation

Lan Nguyen


We propose a dynamic accumulator scheme from bilinear pairings, whose security is based on the Strong Diffie-Hellman assumption. We show applications of this accumulator in constructing an identity-based (ID-based) ring signature scheme with constant-size signatures and its interactive counterpart, and providing membership revocation to group signature, traceable signature and identity escrow schemes and anonymous credential systems. The ID-based ring signature scheme and the group signature scheme have extremely short signature sizes. The size of our group signatures with membership revocation is only half the size of the well-known ACJT00 scheme, which does not provide membership revocation. The schemes do not require trapdoor, so system parameters can be shared by multiple groups belonging to different organizations. All schemes proposed are provably secure in formal models. We generalize the definition of accumulators to model a wider range of practical accumulators. We provide formal models for ID-based ad-hoc anonymous identification schemes and identity escrow schemes with membership revocation, based on existing ones.

Note: - A(f, g, u) is replaced by A(g.f, U_f, U_g, u) in Definition 2 and Theorem 1. Thanks go to Christophe Tartary for informing this problem. - This full version provides new algorithms that are secure against the attack in Eprint 2005/103 "Cryptanalysis and improvement of an ID-based ad-hoc anonymous identification scheme at CT-RSA 05". The new algorithms are more efficient than the improvement proposed in Eprint 2005/103.

Available format(s)
Public-key cryptography
Publication info
Published elsewhere. An extended abstract appears in CT-RSA 2005.
Dynamic accumulatorsID-basedring signaturesad-hoc anonymous identificationgroup signaturesidentity escrowmembership revocationprivacy and anonymity.
Contact author(s)
ldn01 @ uow edu au
2006-11-08: last of 2 revisions
2005-04-28: received
See all versions
Short URL
Creative Commons Attribution


      author = {Lan Nguyen},
      title = {Accumulators from Bilinear Pairings and Applications to ID-based Ring Signatures and Group Membership Revocation},
      howpublished = {Cryptology ePrint Archive, Paper 2005/123},
      year = {2005},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.