Use onion routing. Encrypt the address by public addresses of individual hops, so each hop can only decrypt the next step...