In the registration phase, the voters' tallying keys are blindly signed (blind signature). The blind factors dissociate the tallying keys from the voters. So none can associate a particular ballot with particular voter although it could be convinced that the ballot is valid because of the signature signed by corresponding validated voting key.