Hi. This system doesn't have the cryptographic properties that you think it does. The authority could keep a map between tokens and real IDs. They just say they don't.