Xun Yi: Directed Transitive Signature Scheme. CT-RSA 2007: 129-144