Blind signatures would work, with a bit of effort.