A Special Purpose Signature Scheme for Secure Computation of Traffic in a Distributed Network

We study the problem of traffic aggregation in a network with some natural security constraints. Here each node i has traffic (number of packets) mi and they forward this information through the network to a server node which wishes compute ∑mi. The sever node should not be able to know any additional information about mi’s and an intermediate node should not be able to tamper (without detection) the traffic information it is forwarding. We formalize this problem and suggest a solution using a variant of aggregate signatures, and prove its security using standard hardness assumptions.