individual limits and conditions for example one card may be programmed to allow unlimited access 311 to available media while another card is programmed to allow only limited access 313 to various categories of available media such as internet audio video and books as shown in fig4 the anonymous server 105 contains a database which identifies each user 39 s name and other personal information such as inter alia the user 39 s address the guaranteed limit for transactions the anonymous email id and the current value of items checked out by the user all of the information except the anonymous id are stored in encrypted form and can be decrypted only if the user is not in good standing and attempts to recover checked out items have failed for a continued predetermined period of time such as 60 days this condition may be easily programmed into the id server decrypting process as a condition precedent to allowing the decrypting function thus in this example even the anonymous server 105 cannot access the user 39 s id unless the user is not in good standing with the anonymous id guarantor 105 as shown in fig5 the inventory server database will include inter alia the anonymous id of the user as well as the item number of a checked out item a due date for return of the item and a field to indicate if the item has been reserved for a future date the reservation information is used for reference if the current user wishes to extend the loan period for a given item 0026 fig6 illustrates the transactional flow between the user 101 and the anonymous id guarantor server 105 initially.