Arbitrated quantum-signature scheme