a ring - signature scheme is adapted so that at least one of the variability parameter values used is an identity trace of the anonymous signatory , determined as a function of anonymity withdrawal data stored and held secret by an anonymity withdrawal entity in connection with an identification of the anonymous signatory . this provides a subsequent controlled capacity of withdrawing the anonymity of the signatory , either by an authority , or by the signatory himself .