The EEXCESS privacy preserving proxy server