Ah, from satoshi himself! Group signatures. I wonder if someone implemented a protocol that does this?
https://en.wikipedia.org/wiki/CryptoNote
Aha!