A method for personal identity management in a personal identity manager, comprising the steps of: determining a set of public parameters and a set of private parameters, wherein the set of public parameters is { g, g ∂, G 1, G 2, ê, H 2, p}, in which: p is a prime number and ∂ is a random number selected from a domain Z p; G 1 and G 2 are two selected groups of order q modulo p, in which q is a prime number; e is a bilinear map and e: G 1 × G 1 → G 2; g is a random generator selected from the group G 1; H 2 is a one-way hash function and H 2: G 2 → {0,1}*; and receiving a user identity ID user from a user device; generating a prime pseudonym P prime =< H 1 (ID user), H 1 ∂ ( ID user) > based on the determined set of private parameters and the ID user, in which H 1 is a one-way hash function and H 1: {0,1}* → G 1; and transmitting the prime pseudonym P prime and the set of public parameters to the user device; receiving a sub-pseudonym P pseu =< Q A, Q B, c A > from a third-party device, in which Q A = H 1 k 1 2 k 2, Q B = g k 1 2 and c A = ê ( Q C, Q D), in which Q C = g k 1 k 2, Q D = H 1 ∂ k 1 ( k 2 -1 -1), and k 2 k 2 -1 mod p = 1, k 1 and k 2 are selected random numbers from the domain Z p on the basis of the set of public parameters; calculating a query parameter Ver = e ( g ∂, Q A) c A with the sub-pseudonym P pseu and the set of public parameters; searching for a user identity ID' user in stored user identities based on the query parameter V er such that ê(Q B, H ∂ ( ID' user)) = Ver; and transmitting the ID user to the third-party device as a user identity corresponding to the Pp seu. determining a set of public parameters and a set of private parameters, wherein the set of public parameters is { g, g ∂, G 1, G 2, ê, H 2, p}, in which: p is a prime number and ∂ is a random number selected from a domain Z p; G 1 and G 2 are two selected groups of order q modulo p, in which q is a prime number; e is a bilinear map and e: G 1 × G 1 → G 2; g is a random generator selected from the group G 1; H 2 is a one-way hash function and H 2: G 2 → {0,1}*; and p is a prime number and ∂ is a random number selected from a domain Z p; G 1 and G 2 are two selected groups of order q modulo p, in which q is a prime number; e is a bilinear map and e: G 1 × G 1 → G 2; g is a random generator selected from the group G 1; H 2 is a one-way hash function and H 2: G 2 → {0,1}*; and receiving a user identity ID user from a user device; generating a prime pseudonym P prime =< H 1 (ID user), H 1 ∂ ( ID user) > based on the determined set of private parameters and the ID user, in which H 1 is a one-way hash function and H 1: {0,1}* → G 1; and transmitting the prime pseudonym P prime and the set of public parameters to the user device; receiving a sub-pseudonym P pseu =< Q A, Q B, c A > from a third-party device, in which Q A = H 1 k 1 2 k 2, Q B = g k 1 2 and c A = ê ( Q C, Q D), in which Q C = g k 1 k 2, Q D = H 1 ∂ k 1 ( k 2 -1 -1), and k 2 k 2 -1 mod p = 1, k 1 and k 2 are selected random numbers from the domain Z p on the basis of the set of public parameters; calculating a query parameter Ver = e ( g ∂, Q A) c A with the sub-pseudonym P pseu and the set of public parameters; searching for a user identity ID' user in stored user identities based on the query parameter V er such that ê(Q B, H ∂ ( ID' user)) = Ver; and transmitting the ID user to the third-party device as a user identity corresponding to the Pp seu.