Abstract. Rental records contain much sensitive information on individuals, so if abused by the rental service providers, user privacy could be jeopardized. To mitigate this concern, we present a privacy preserving rental system where interests of both the users and the service provider are protected. In particular, users are enabled to engage in a rental service in an anonymous manner; however, users who keep overdue rental items are subject to anonymity revocation. Moreover, to enforce rental limit we propose a new one-show anonymous credential scheme, tailored to the scenario of on-line credential issuing. Keyword: Privacy, Anonymity, Group signature, One-show anonymous credential.