Abstract: Anonymous subscription protocols are cryptographic techniques for protecting subscribers’ privacy.In this paper，a practical and secure anonymous subscription protocol is put forward，which is motivated by the idea of anonymous tokens.The main construction of the new protocol is based on several building blocks，i.e.，the Camenisch-Groth group signature scheme，the Camenisch-Lysyanskaya signature scheme，etc.In addition，to distribute anonymous tokens，a well-known protocol for signing a committed value is extended.In the random oracle model，it can be proved that the new protocol fulfills all the characteristics that anonymous subscription protocols should satisfy in order to be interesting or useful in practice，i.e.，anonymity，unlinkablility，unforgeability，coalition-resistance，etc.

摘要： 匿名订购协议是一类用于保护订购者隐私的密码机制。基于匿名令牌的思想提出一个安全实用的匿名订购协议。新协议的设计借鉴了Camenisch-Groth群签名以及Camenisch-Lysyanskaya签名等技术。另外，为了实现匿名令牌的分发，对一个已有的用于对被承诺值签名的协议进行了扩展。在随机预言模型下，可以证明新协议满足了实用匿名订购协议所要求的全部特性，即匿名性、无关联性、不可伪造性、抵抗联合攻击等。