Fig. 3
Initialization 3: Step 6 – to each arbitrator A r i the user sends its identifier I D U , the ToU, the commitment C, the verification key V K U , and the share s h i . Step 7 – to each arbitrator A r i the server sends its identifier I D U , the ToU, the commitment C, the verification key V K U , and the index i. Step 8 – each arbitrator sends OK to the user. Step 9 – each arbitrator sends OK to the server