Privacy　protection　is　an　important　issue　in　e-business　security.　Although　some　methods　have　been　proposed　to　protect　customer＇s　online　behavior　and　identity　in　e-business　processes,　in　reality,　when　making　a　purchase,　the　customer　has　to　submit　an　order　that　usually　contains　his/her　real　identity　and　delivery　address,　resulting　in　the　disclosure　of　customer＇s　privacy　since　the　vendor　can　easily　link　the　above　information　to　all　the　information　that　has　been　collected　about　the　customer.　In　this　paper,　we　propose　a　user-centric　privacy　protection　method　to　break　the　link　between　customer＇s　online　behavior　and　information　related　to　the　delivery　address.　In　our　method,　the　vendor　gets　an　order　form　from　a　logistics　company　under　the　customer＇s　authorization,　leading　to　a　user-centric　way　of　control.　Since　the　vendor　cannot　get　the　customer＇s　delivery　address　and　the　logistics　company　cannot　get　the　customer＇s　online　behavior,　our　method　can　effectively　provide　privacy　protection.