If interested in the subject, I'd suggest to have a look also at DAA - Direct Anonymous Attestation [1]. It's probably one of the most advanced protocols relate

If interested in the subject, I'd suggest to have a look also at DAA - Direct Anonymous Attestation [1]. It's probably one of the most advanced protocols related to ZKP, part of the Trusted Computing Group specs, there are several newer versions on pairing-based crypto, there are implementations both software and hardware... in short, it's quite an interesting protocol. [1] http://en.wikipedia.org/wiki/Direct_Anonymous_Attestation http://en.wikipedia.org/wiki/Direct_Anonymous_Attestation