A method is described that enables users of multimedia data delivery services to conceal their purchasing habits fi-om data providers and settlement institutions. It does this by providing a mediator between the user and the provider, and by concealing the correspondence between the data contents that were purchased and the key the user bought to decode them. This method provides better privacy protection than Supermall and Infoket.