J. Camenisch og M. Michels, “A Group Signature Scheme Based on an RSA-Variant”, BRICS, bd. 5, nr. 27, jan. 1998.