An efficient approach of member revocation in group signature is verifier-local revocation.In this approach

revocation messages are only sent to signature verifiers

while signers have no involvement.There are some problems in group signature with verifier-local revocation;for example

some group signature schemes do not have exculpability and the computation cost of revocation check is dependent on the length of the revocation list

and so on.In order to solve above problems

and aim at the application of group signatures for enabling privacy-preserving attestation

a practical group signature scheme with verifier-local revocation based on the strong Diffie-Hellman assumption and decision linear Diffie-Hellman assumption

which was proven to be secure in the random Oracle model was proposed.The efficiency of the proposed scheme was analyzed.Compared with the existing verifier-local revocation group signatures

the computa-tion cost of revocation check in the scheme is independent of the length of the revocation list.At the same time

the scheme satisfies exculpability and backward unlinkability.