Case Study: Anonymous Payments
Server auth module processes digital cash, validates it, and generates random ID for paid client.
Client receives T = EK(Nonce, ID, ExpireTime) encrypted by secret key of server.
Server does not know owner of currency, Bank does not know random ID issued to client. So the user is anonymous to both (unless they collude).