ECDSA-Compatible Privacy Preserving Signature With Designated Verifier

We present the first ECDSA compatible privacy preserving signature scheme, which is based on the work of nominative signature, with a designated verifier. The use case forthis signature scheme is to sign personal information. For example, a user can prove toan insurance company that they are diagnosed with a certain disease and is eligible foran insurance claim. The insurance company will be convinced the doctor's signature is genuine but it cannot leak the information with a convincing proof (i.e. the signature verification proof is not transferable, but leaking information without a proof is still possible). As in our example, the signature generation has to be initiated by the patient, with the help of the doctor, and the signature can only be verified by interacting with the patient directly.