Dynamic universal accumulators for DDH groups and their application to attribute-based anonymous credential systems

Man Ho Allen Au, Patrick P. Tsang, Willy Susilo, Yi Mu

Research output: Chapter in book / Conference proceedingConference article published in proceeding or bookAcademic researchpeer-review

55 Citations (Scopus)


We present the first dynamic universal accumulator that allows (1) the accumulation of elements in a DDH-hard group G and (2) one who knows x such that y = gxhas - or has not - been accumulated, where g generates G, to efficiently prove her knowledge of such x in zero knowledge, and hence without revealing, e.g., x or y. We introduce the Attribute-Based Anonymous Credential System, which allows the verifier to authenticate anonymous users according to any access control policy expressible as a formula of possibly negated boolean user attributes. We construct the system from our accumulator.
Original languageEnglish
Title of host publicationTopics in Cryptology - CT-RSA 2009 - The Cryptographers' Track at the RSA Conference 2009, Proceedings
Number of pages14
Publication statusPublished - 15 Jul 2009
Externally publishedYes
EventCryptographers' Track at the RSA Conference, CT-RSA 2009 - San Francisco, CA, United States
Duration: 20 Apr 200924 Apr 2009

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349


ConferenceCryptographers' Track at the RSA Conference, CT-RSA 2009
Country/TerritoryUnited States
CitySan Francisco, CA

ASJC Scopus subject areas

  • Theoretical Computer Science
  • Computer Science(all)

Cite this