A Special Purpose Signature Scheme for Secure Computation of Traffic in a Distributed Network

Abstract We study the problem of traffic aggregation in a network with some natural security constraints. Here each node i has traffic (number of packets) m i and they forward this information through the network to a server node which wishes compute ∑ m i . The sever node should not be able to know any additional information about m i 's and an intermediate node should not be able to tamper (without detection) the traffic information it is forwarding. We formalize this problem and suggest a solution using a variant of aggregate signatures, and prove its security using standard hardness assumptions