|Abstract: Each signer in an organization plays a different role in the
organization and the signing order among signers often reflects the
relationships among the signers. A signature generated for one signing
order may have different importance from a signature generated for other
signing order. We discuss how to construct a signature scheme which
provides the verification of not only message(s) but also the signing
order, especially the structure of the signers. Our discussion mainly
focus on the scheme published together with Yanai and Chida in 2011.