BIB-VERSION:: CS-TR-v2.0 ID:: ncstrl.dartmouthcs//TR2009-643 ENTRY:: April 22, 2009 ORGANIZATION:: Dartmouth College, Computer Science REQUESTED-BY:: sws@cs.dartmouth.edu REQUESTED-FOR:: patrick@cs.dartmouth.edu REQUESTED-DATE:: Wed Apr 15 20:00:48 EDT 2009 TITLE:: Dynamic Universal Accumulators for DDH Groups and Their Application to Attribute-Based Anonymous Credential Systems TYPE:: Technical Report (paper) REVISION:: 1 AUTHOR:: Au, Man Ho AUTHOR:: Tsang, Patrick P. AUTHOR:: Susilo, Willy AUTHOR:: Mu, Yi DATE:: April 2009 RETRIEVAL:: For a paper copy, email RETRIEVAL:: For a paper copy, write to Technical Report Librarian Department of Computer Science Dartmouth College 6211 Sudikoff Laboratory Hanover, NH 03755-3510 USA RETRIEVAL:: PDF at http://www.cs.dartmouth.edu/reports/TR2009-643.pdf ABSTRACT:: We present the first dynamic universal accumulator that allows (1) the accumulation of elements in a DDH-hard group G and (2) one who knows x such that y=g^x has --- or has not --- been accumulated, where g generates G, to efficiently prove her knowledge of such x in zero knowledge, and hence without revealing, e.g., x or y. We introduce the Attribute-Based Anonymous Credential System (ABACS), which allows the verifier to authenticate anonymous users according to any access control policy expressible as a formula of possibly negated boolean user attributes. We construct the system from our accumulator. NOTE:: This report is the extended version of the paper to appear in CT-RSA '09 under the same title. END:: ncstrl.dartmouthcs//TR2009-643