info-theoretic model of anonymity