Skip to Main Content
We present Anon-Pass, a protocol and system for anonymous subscription services that allow users to anonymously authenticate while preventing mass sharing of credentials. Service providers cannot correlate users' actions, yet service providers are guaranteed that each account is in use at most once at a given time. A central tension in anonymous subscription services is balancing a service provider's computational resource use with users' desire for flexible access. Anon-Pass focuses on practical anonymity, for example, in multi-media services, making all accesses to different items (e.g. articles, songs) appear to be from different users, but not decorrelating access to different parts of the same item. This level of practical anonymity allows Anon-Pass to provide users with flexible service at low cost to the provider. We measure the performance of a prototype and use it in several services including a music streaming service and an unlimited-use subway pass.