Ring signatures offer highly desirable privacy features like anonymity and ad-hoc group formation with high autonomy, but partially lack linkability and accountability features required for strict use-cases like consent management in healthcare. Existing signature schemes fail to natively integrate scoped linkability with decentralized accountability defined here on-demand unconditional deanonymization of signers without reliance on a trusted party (opener) or a separate cryptographic commitment. We introduce Deanonymizable Scoped Linkable Ring Signatures (DSLRS) to address this gap. DSLRS builds on previous linkable and accountable signature schemes and their cryptographic primitives to construct a new signature scheme that natively implement both privacy and trust features. Scoped linkability in DSLRS is achieved using "scopes" (context identifiers) and dynamic key images, effectively providing ring-independent scoped linkability and unlinkability across different scopes. DSLRS relies on k-of-N decentralized deanonymization network nodes to extract the signer's public key (identity) from ElGamal components built in the signature, achieving ring-independent decentralized accountability. The full DSLRS algorithms, formal property definitions and proofs, signature evaluation and experimental results from an implementation, and a blockchain-based instantiation and application of our scheme in consent management for clinical trials are provided. DSLRS is proved under the ECDLP and DDH hardness assumptions in the Random Oracle Model (ROM).

翻译：暂无翻译