Group Signatures with Verifier-Local Revocation and Backward Unlinkability in
the Standard Model

B. Libert & D. Vergnaud

Group signatures allow users to anonymously sign messages in the name of a
group. Membership revocation has always been a critical issue in such
systems. In 2004, Boneh and Shacham formalized the concept of group
signatures with verifier-local revocation where revocation messages are only
sent to signature verifiers (as opposed to both signers and verifiers). This
paper presents an efficient verifier-local revocation group signature
(VLR-GS) providing backward unlinkability (i. e. previously issued signatures
remain anonymous even after the signer's revocation) with a security proof in
the standard model (i. e. without resorting to the random oracle heuristic).