Convertible ring signature

A ring signature scheme enables a signer to produce a signature without revealing their identity. A verifier can verify that the ring signature was made by a ring member, but cannot identify the real signer. A convertible ring signature scheme is proposed that allows the real signer to convert a ring signature into an ordinary signature by revealing secret information about the ring signature. Thus the real signer can prove the ownership of a ring signature if necessary.