ID-Based Convertible Limited (Multi-)Verifier Signature Scheme

A limited verifier signature scheme provides the functionality that the signer can decide not only when but also by whom his signatures can be verified. This can be used to solve conflicts between authenticity (non-repudiation) and privacy (controlled verifiability) in the digital signatures, and to preserve the privacy of the signer. In this paper, we propose two variants for limited verifier signature, called ID-based convertible limited verifier signature (ID-CLVS) and ID-based convertible limited multi-verifier signature (ID-CLMVS) respectively. Our ID-CLMVS scheme allows limiting multi-verifier by only one signature computation, which overcomes the limitation of only one limited verifier in generic limited verifier signature schemes. Our schemes were proved to achieve the desired security notions under the random oracle model.