Abstract: Anonymous subscription protocols are cryptographic techniques for protecting subscribers’ privacy.In this paper，a practical and secure anonymous subscription protocol is put forward，which is motivated by the idea of anonymous tokens.The main construction of the new protocol is based on several building blocks，i.e.，the Camenisch-Groth group signature scheme，the Camenisch-Lysyanskaya signature scheme，etc.In addition，to distribute anonymous tokens，a well-known protocol for signing a committed value is extended.In the random oracle model，it can be proved that the new protocol fulfills all the characteristics that anonymous subscription protocols should satisfy in order to be interesting or useful in practice，i.e.，anonymity，unlinkablility，unforgeability，coalition-resistance，etc.