"The paper only discusses blind signature algorithm" No, it seems to discuss something else. It starts out talking about blind signatures, then veers off with

"The paper only discusses blind signature algorithm" No, it seems to discuss something else. It starts out talking about blind signatures, then veers off with claims like this: "The novelty of the scheme is that unlike the original Chaum blind signature scheme, this one does not allow anyone to prove that the signing party signed a particular message" I am not actually sure what you are trying to say there. Does it mean that I can only narrow down the possible signers to some group? Does it mean that the signature key is ephemeral, yet somehow meaningful? To put it another way, what differentiates your proposal from this: https://eprint.iacr.org/2011/402.pdf https://eprint.iacr.org/2011/402.pdf ""Multiparty computation" with "threshold system" here are provided by Bitcoin automatically, " What? Where? Citation needed.