1 Abstract. We propose a dynamic accumulator scheme from bilinear pairings, whose security is based on the Strong Die-Hellman assump- tion. We show applications of this accumulator in constructing an identity- based (ID-based) ring signature scheme with constant-size signatures and its interactive counterpart, and providing membership revocation to group signature, traceable signature and identity escrow schemes and anonymous credential systems. The ID-based ring signature scheme and the group signature scheme have extremely short signature sizes. The size of our group signatures with membership revocation is only half the size of the well-known ACJT00 scheme, which does not provide membership revocation. The schemes do not require trapdoor, so system parameters can be shared by multiple groups belonging to dierent organizations. All schemes proposed are provably secure in formal models. We gener- alize the definition of accumulators to model a wider range of practical accumulators. We provide formal models for ID-based ad-hoc anonymous identification schemes and identity escrow schemes with membership re- vocation, based on existing ones. Keywords: Dynamic accumulators, ID-based, ring signatures, ad-hoc anonymous identification, group signatures, identity escrow, membership revocation, privacy and anonymity.
['Lan Nguyen']
Accumulators from Bilinear Pairings and Applications to ID-based Ring Signatures and Group Membership Revocation