It looks like we are not the only ones to define desiderata for anonymity, or make up cute charts. Check David Martin's thesis http://www.cs.du.edu/~dm/thesis.ps pages 33 and 49. Actually, check out the entire chapters 3 and 4 Thanks, -David