| 摘要 |
<p>Provided is an anonymous authentication system which can issue an anonymous authentication certificate that can hold any number of attributes. A signature device has a means for receiving the input from an authentication authority public key, an anonymous authentication certificate, a signature key, a text and attribute proof set, and an attribute public key; a means for generating an attribute set representation value which generates an attribute set representation value from the attribute proof set and attribute public key which were input; a means for generating an attribute set representation key which generates an attribute set representation key from the attribute proof set; a means for generating non-interactive zero-knowledge proof which generates non-interactive zero-knowledge proof from the authentication authority public key, anonymous authentication certificate, signature key, and text which were input, and the attribute set representation value generated by the means for generating an attribute set representation value and the attribute set representation key generated by the means for generating an attribute set representation key; and a signature output means which outputs the non-interactive zero-knowledge proof as signature data.</p> |
