Home > Resources > papers > ASM06-Dynamic-kTAA

Constant-Size Dynamic k-TAA (Au, Susilo, Mu 2006)

Last modified: 2026-10-27

DOI: 10.1007/11832072_8 · URL: https://eprint.iacr.org/2008/136

Summary

Proposes a dynamic k-times anonymous authentication (k-TAA) scheme with constant-size proofs, in which users authenticate anonymously up to k times per verifier, and over-use is detectable and traceable. The construction introduced the signature scheme now known as BBS+ (a variant of the Boneh–Boyen–Shacham group-signature building block that signs message blocks and supports efficient proofs of knowledge), the basis of today's BBS anonymous-credential standardization relevant to the EUDI wallet. (SCN 2006.)

Related resources

• A Signature Scheme with Efficient Protocols (Camenisch, Lysyanskaya 2002) (paper, 2002)
• Short Group Signatures (Boneh, Boyen, Shacham 2004) (paper, 2004)