Dual invisible signature scheme

In the following, these properties are taken for granted hence the name dual invisible signature scheme is restricted to schemes with these properties. 

The structure of authentication and disputes in existing dual invisible signature schemes resembles that of existing invisible signature schemes with ordinary security, not that of fail-stop signature schemes. The protocol carried out during authentication is of the following restricted form ... 

Invisible Signature Schemes with Dual Security... 

As mentioned in Section 6.1.4, the usual method to obtain a non-invisible signature scheme with dual security is to use a fail-stop signature scheme and to identify broken with FALSE. The properties of the only other existing scheme of this type were sketched there, too. 

---