Abstract: A multi-proxy multi-signature scheme requires all proxy signers to participate in the signature, and some proxy signers’ absence will lead to the proxy signature’s failure, and the proxy signers who participate in the signature will know the concrete content of the message. So there exist security flaws. Based on the threshold signature and blind signature, the paper proposes a[(t,n)]robust multi-proxy multi-blind signature scheme. In this scheme, any[t]（or more than[t]）proxy signers can generate a signature of a specific message, and they don’t know the concrete content of the message so as to avoid the exposure of the sensitive information. At last, the message owner will remove the blind factor and finish the final signature. The security analysis shows that the scheme satisfies the security features of unforgeability, undeniability, traceability, robustness and unlinkability etc.

Key words: discrete logarithm problem, proxy signature, threshold signature, blind signature, robustness

摘要： 多重代理多重签名方案要求所有代理签名人参与签名，若其中一个代理签名人缺席就会导致无法进行代理签名，且参与签名的代理人均知晓消息内容，存在安全缺陷。结合门限签名和盲签名，提出一个[(t,n)]门限多重代理多重盲签名，只要[t]个（或[t]个以上）代理签名人就能对消息签名，且代理签名人对消息不知情，避免了敏感信息的暴露，最后消息拥有者进行脱盲变换完成最终签名。经安全性分析证明该方案满足不可伪造性、不可否认性、可追踪性、鲁棒性和不可链接性等安全特性。

关键词: 离散对数困难性问题, 代理签名, 门限签名, 盲签名, 鲁棒性