Universal designated verifier signcryption

Abstract

Universal Designated Verifier Signature (UDVS) was introduced by Steinfeld et al. in Asiacrypt'03. UDVS allows a signature holder, who has a signature of a signer, to convince a designated verifier that he is in possession of a signer's signature, while the verifier cannot transfer such conviction to anyone else. In existing designs of UDVS, a secure channel is required between the signer and the signature holder for signature transmission. In this paper, we eliminate that requirement by combining the notions of UDVS and signcryption, and for the first time, propose the notion of universal designated verifier signcryption (UDVSC). We provide formal definitions and a concrete universal designated verifier signcryption scheme in the identity-based setting. © 2012 Springer-Verlag.