There is a signature scheme
which can aggregate two or more persons' signatures to one,
called an aggregate signature.
In this paper, we propose a scheme of
an aggregate signature which has additional functionality
allowing any holder of a signature to designate the signature
to any desired designated-verifier.
By this functionality,
no one other than the designated-verifier can verify the signature,
so the signature passed to other persons
would not appear where the signer does not intend to send it
in the form which anyone can verify.