@article{oai:ipsj.ixsq.nii.ac.jp:00011166,
 author = {Hidenori, Kuwakado and Hatsukazu, Tanaka and Hidenori, Kuwakado and Hatsukazu, Tanaka},
 issue = {8},
 journal = {情報処理学会論文誌},
 month = {Aug},
 note = {Rivest  Shamir  and Tauman have proposed the ring signature scheme which makes it possible to specify a groupwithout revealing which member signed a message.Bresson  Stern  and Szydlo have showna (k  n) threshold ring signature scheme.It is possible to convince a verifierthat at least k members in the n-member group signed a messagewithout revealing which k members signed the message.In this paper we propose a new (k  n) threshold ring signature scheme.While the previous schemes form a ring of individual signatures our scheme forms a curve of individual signatures.Our scheme is more efficient than the scheme shown by Bresson  et al.Moreover we show thatElGamal's signature scheme which is not based on the trapdoor one-way permutation is available in the threshold ring signature., Rivest, Shamir, and Tauman have proposed the ring signature scheme,which makes it possible to specify a groupwithout revealing which member signed a message.Bresson, Stern, and Szydlo have showna (k, n) threshold ring signature scheme.It is possible to convince a verifierthat at least k members in the n-member group signed a messagewithout revealing which k members signed the message.In this paper,we propose a new (k, n) threshold ring signature scheme.While the previous schemes form a ring of individual signatures,our scheme forms a curve of individual signatures.Our scheme is more efficient than the scheme shown by Bresson, et al.Moreover,we show thatElGamal's signature scheme,which is not based on the trapdoor one-way permutation,is available in the threshold ring signature.},
 pages = {2146--2154},
 title = {Threshold Ring Signature Scheme Based on the Curve},
 volume = {44},
 year = {2003}
}