Efficient Signature Schemes Supporting Redaction, Pseudonymization, and Data Deidentification

This paper gives a new signature algorithm that allows for controlled changes to the signed data. The change operations studied is removal of subdocuments (redaction), pseudonymization, and gradual deidentification of hierarchically structured data. These operations are applicable in a number of practically relevant application scenarios, including the release of previously classified government documents, privacy-aware management of audit-log data, and the release of tables of health records.