J. Camenisch and M. Michels, “A Group Signature Scheme Based on an RSA-Variant”, BRICS, vol. 5, no. 27, Jan. 1998.