The conference paper is the best read for details: https://dl.acm.org/doi/pdf/10.1145/3576915.3616578 https://dl.acm.org/doi/pdf/10.1145/3576915.3616578 - the s

The conference paper is the best read for details: https://dl.acm.org/doi/pdf/10.1145/3576915.3616578 https://dl.acm.org/doi/pdf/10.1145/3576915.3616578 - the security properties of the scheme are 1) supports covert inspection, 2) emblems are verifiably authentic and 3) provides accountability - identification of parties that issued fraudulent emblems. The covert inspection part is primarily through broadcast of the emblem through multiple channels (so it will go to many people interacting with the systems who didn't ask) so that the attacker will see the emblem passively without having to make a request for it that only attackers would make.