Abstract. Existing threshold signature schemes come in two flavors: (i) fully private, where the
signature reveals nothing about the set of signers that generated the signature, and (ii) accountable,
where the signature completely identifies the set of signers. In this paper we propose a new type of
threshold signature, called TAPS, that is a hybrid of privacy and accountability. A TAPS signature
is fully private from the public’s point of view. However, an entity that has a secret tracing key
can trace a signature to the threshold of signers that generated it. A TAPS makes it possible for
an organization to keep its inner workings private, while ensuring that signers are accountable for
their actions. We construct a number of TAPS schemes. First, we present a generic construction
that builds a TAPS from any accountable threshold signature. This generic construction is not
efficient, and we next focus on efficient schemes based on standard assumptions. We build two
efficient TAPS schemes (in the random oracle model) based on the Schnorr signature scheme. We
conclude with a number of open problems relating to efficient TAPS.
![[Cô Vũ Mai Phương] Kiến thức trọng tâm về Mệnh đề quan hệ](/uploaded/TaiLieu/20201219/485d0129-b6ac-4829-87f8-4dc6f13ef12aMỆNH-ĐỀ-QUAN-HỆ.png)
![[Cô Vũ Mai Phương ] 20 chuyên đề ngữ pháp Tiếng Anh ôn thi THPT Quốc gia](/uploaded/TaiLieu/20201219/bf97de01-d0d7-4a3b-b560-086566014e20download.png)
.png)