A ring signature would do. You can be sure that the signature came from one of a set of public keys, without knowing which particular private key was used.