In our process of digital checks for banking - which needs to work online and offline - the receiver needs to know the chain of all generated signatures without consulting an Internet service. In this scheme the sender gets offline in order to compute his real last balance to accept or to refuse the transaction. This is to prevent an offline multi-spend of the value of the balance, and making an overdraft.
Has someone ever build a scheme to make a signature, like ECDSA, linkable?
I know that it exists for ring signatures, but I need it for simple ECC signature.
