The current group signature scheme either neglects the problem [1,2,4,5,7,10] , or is low efficient [3] , or is insecure [5] .

• 现存的群签名方案要么不考虑群成员的废除问题[1,2,4,5,7,10],要么存在计算量与被废除成员线性相关的缺点[3],是低效的,要么是不安全的[5]。