A formal approach toward authenticated authorization without identification