Blockchain-based authentication system

Abstract

A blockchain-based authentication system consisting of: a biometric authentication device configured to capture biometric user data, generate a cryptographic hash of the biometric input, and sign the authentication request with a private key stored in a tamper-proof security enclave; a blockchain-based authentication ledger implemented as a distributed ledger network comprising multiple validation nodes, where the nodes validate authentication requests through a consensus mechanism and immutably store authentication records; a smart contract-based access control module deployed on the blockchain network and programmed to process authentication transactions, enforce authentication policies, and issue access tokens upon verification;a communication interface integrated into the biometric authentication device that enables secure transmission of authentication requests to the blockchain ledger via wireless protocols such as Bluetooth, NFC, and Wi-Fi, or via wired connections such as USB-C; wherein, after capturing biometric input, the biometric authentication device generates an authentication request containing a signed cryptographic hash of the biometric data, a timestamp, and an authentication identifier, which is transmitted to the blockchain-based authentication ledger for validation; and wherein, after successful verification, the smart contract-based access management module executes predefined access policies, generates a time-limited access token, and transmits it to the requesting system to grant authentication-based access.

Description

Field of the InventionThe present invention relates to a method and a system for blockchain-based authentication, which contributes in particular to improving the security in digital identity checking, access control and data integrity.BACKGROUND OF THE INVENTIONConventional authentication systems still rely on central authority (e.g., password-based credential, digital certificates, biometric databases). However, these techniques are typically vulnerable to security risks such as phishing, compromised keywords, database hacks, and a single failure point. By contrast, blockchain is a decentralized, cryptographically secure possibility of authenticating users and verifying transactions without intermediate structures being required.Existing blockchain-based authentication frameworks suffer from limited scalability, efficiency, and applicability to numerous authentication situations. Therefore, the object is to develop a powerful blockchain-based authentication system to increase security without compromising efficiency, convenience, and user-friendliness.As digital transactions, secure communication, and authentication are becoming more dependent on each sector, demand for strong authentication systems has dramatically increased. Traditional authentication methods such as password, two-factor authentication (2FA), and centralized biometric systems have been the most important means of securing IT infrastructures and securing user identities. However, these systems have inherent weaknesses and are vulnerable to various forms of Internet crimilitity, such as fishing attacks, robot theft of login information, or database theft. In addition, they are dependent on central authorities, which can lead to individual failure points. The deficiencies of these conventional methods have led to the development of more sophisticated authentication mechanisms, such as remote authentication systems, federated identity management, and biometric cryptographic authentication. While these solutions are advancing over old systems, they still have problems with scalability (particularly when AIM may be overloaded), user privacy, and protection from sophisticated malware.Password-based authentication has been historically the most common form to secure access to digital systems. Users report to and store keywords which are then matched to a database controlled by a central agency. Although this may appear simple and uncomplicated, it has basic deficiencies. Keywords are susceptible to brute force attacks, dictionary attacks, and phishing schemes. Indeed, despite complex password policies, users often have difficulty in noting multiple unique credentials, resulting in in insecure practices such as reuse of keywords or storage of keywords on paper in in insecure locations. Centralized password databases are also an sought after goal for cybercriminality. When compromised, millions of user login information often used for identity theft and financial fraud are lost.Furthermore, two-factor authentication (2FA) and multi-factor authentication (MFA) have been introduced to reduce the risk of password by requiring a second verification factor. These may be one-time keywords (OTPs) sent by SMS, email or authentication apps, or even hardware security tokens or biometric verification. 2FA is a large step in the direction of security, but not marriage-proof. One of the greatest risks with SMS-based 2FA is an attack called SIM swapping, in which the destination telephone number is transferred to a new SIM card and the authentication codes sent to the number are intercepted. Authentication apps and hardware tokens provide greater security, but may result in user-friendliness issues, e.g. when one has to rely on another device or authentication tokens may be lost. MFA is effective, but does not prevent centralized databases that are lucrative targets for cyber attacks from being compromised.Since biometric authentication is based on fingerprint, face and retina recognition, as well as voice recognition, it is enjoying great popularity due to its user-friendliness and perceived security. Modern smartphones, laptops, and even enterprise security systems increasingly support biometric authentication. This record is unique to each user, but its use carries significant risks of security and data protection. In contrast to keywords, biometric registration information can no longer be changed after its compromise. Biometric data cannot be easily reset in the event of a fingerprint database being broken down, unlike the case of theft of password data. Moreover, biometric recognition systems are vulnerable to snooping attacks in which an attacker uses high-quality images, 3D masks, or synthetic voice models to log in to the authentication system. Biometric data is often stored on central servers, leading to data protection designs, which may also render data vulnerable to unauthorized access and abuse.Another implementation for solving this problem is Sprung Identity Management (FIM). This is a solution with which the authentication can be distributed to a plurality of platforms, which are each operated separately and for which no separate login is required for each individual service. Single Sign-On (SSO) systems offered by companies such as Google, Microsoft, and Facebook allow users to log in once and access multiple applications without having to re-enter the log in information. SSO offers a toll use experience and reduces the need for password fatigue, but also introduces new security challenges. An attack on an SSO account could possibly result in an attacker receiving access to everything via this account. Therefore, it is a worthwhile goal for cybercriminals. Moreover, federated identity providers act as a central authority that users can track across different platforms.Another authentication method is the use of public key infrastructures (PKI) and digital certificates that use asymmetric cryptography. In a PKI system, for cryptographic purposes, users receive a key pair that includes a public and a private key. The public key is passed to other parties while the private key remains securely stored on the user's device. Digital certificates issued only by trusted certification bodies (CAs) confirm the legitimacy of a user's public key. Although PKI is used in secure communication, digital signatures, SSL / TLS protocols, and many more, it has scalability and trust constraints. Centralized certification bodies - the major causes of previous certificate issues and security violations - are the literally realization of a single point of failure. The call-back and expiration of digital certificates also increase the administrative complexity of a widespread introduction.Blockchain technology has evolved to the ideal solution to overcome many limitations of traditional authentication systems. In blockchain-based authentication, central authorities are no longer required, since decentralized master books are used which offer a tamper-proof record of the authentication transactions. However, current implementations of blockchain authentication are faced with a number of challenges. For this reason, users must handle cryptographic keys in many blockchain-based identity solutions, a process that often results in additional expense and errors. This makes the system less user-friendly, as the loss of a private key would lead to an irreversible loss of access to the associated funds. Moreover, certain blockchain authentication methods are based on ineffective consensus methods such as proof-of-work (PoW), which results in latency and high computational costs and makes them impractical for use for real-time authentication.Blockchain authentication has introduced a new concept called Self-Resource Identity (SSI), in which users have full control over their data without relying on third party agents. Standard SSI solutions utilize decentralized identifiers (DIDs) and auditable login information recorded in a blockchain. This allows a situation in which users can only share what they need to share without giving information about what would not be required for participation in the transaction. Nevertheless, SSI is still novel and the interoperability problem continues to exist; indeed, different blockchain networks use different standards and protocols. As a bonus, the debatte must be contributed by consensus and differences in order for service providers and regulatory authorities to accept the bulk deployment approach.They have also gained popularity as a non-perimeter based alternative to traditional perimeter safety models. In a zero trust model, each individual authentication request is continuously checked in context-related fashion, for example on the basis of the device state, the geographical location and a behavior analysis. Although zero trust contributes to organization security by forcing existing systems to remove implicit trust from access attempts now far outside the traditional network perimeter, its implementation is a complicated and delicate matter because its success depends on seamless integration into existing authentication infrastructures. Even most zero trust architectures depend on centralized identity providers, which is the opposite of the decentralized combination of blockchain-based authentication.Another disadvantage of the authentication system is the compromise between security and user-friendliness. In the digital world, highly secure authentication methods provide additional friction, frustrate humans, and make access to digital services difficult. The less costly a security measure is, the less likely users are to ignore them, and the better their security practices are ultimately. On the other hand, poor authentication methods compromise the security of unprotected access systems. The best possible authentication must offer all security functions and at the same time be very user-friendly, i.e. it does not have to note any password or carry out a plurality of repeated checking steps.Existing authentication methods have several limitations that entail the need for a more distributed, user-centric authentication framework. By combining biometric identification, cryptographic security, and smart contract-based access control, a blockchain-based authentication system can address many limitations of traditional approaches. This results in a glass fiber development for decentralizing the identity check and for avoiding the dependence on central authorities, which can also store data sets securely, unchangeably and tamperproof on the blockchain. Blockchain authentication solutions must meet user-friendliness, key management / scalability, and legal compliance challenges to achieve broad acceptance. Moreover, privacy may also be improved by implementing advanced cryptographic methods (e.g., homomorphic encryption and zero-know-edge evidence) used to ensure security by authentication.SUMMARY OF THE INVENTIONAn authentication system of the present invention is based on blockchains and uses cryptographic techniques and decentralized ledger technology to authenticate users, manage authentication data, and save transactions. A biometric and cryptographic processing device serves as an authentication device that is connected to the blockchain-based ledger, which stores and validates authentication datasets via an authorization framework based on smart contracts.The authentication device is equipped with a secure processing unit, a biometric scanner (fingerprint, retina or face), a near field communication (NFC) device and a cryptographic key storage device. A device receives an authentication request, then receives the user's biometric inputs, and converts them to a cryptographic hash. This hash is signed together with a time stamped authentication request with a private key stored in the secure enclave of the device. 2. the signed authentication request is sent to the blockchain network where a consensus mechanism ensures the integrity of the request by matching it to the previously stored authentication datasets.After being provided as part of the blockchain infrastructure, a decentralized network of validation nodes processes authentication requests using a smart contract mechanism. These smart contracts execute authentication policies such as authentication via MFA, conditional access rules, and call-back methods. After successful authentication of the user, the system issues a time-limited access token with which the user can access the indicated resource. As a result, all authentication transactions are stored in the blockchain ledger and are therefore unalterable, comprehensible, and tamper proof.This is an important security application of the blockchain that specifies the user identity primarily for proof of the identity or as an authentication system. Its framework for decentralized identity solutions obviates the need for central authentication sites which are susceptible to cyber attacks, individual failure points and undesired access to personal data. The system creates an invariable, distributed master book using blockchain technology, which securely records the transactions associated with authentication and thus offers transparency and resistance to fraudulent behavior. This method is secure and allows users to be controlled for their own authentication data, which is an improvement over conventional identity management systems.The embodiment of the invention is intended to establish hybrid systems for improved user verification. Using biometric scanners (fingerprint reader, face recognition module, retinal scanner), the system collects unique biometric data which is then converted into cryptographic hashes for subsequent secure processing. While conventional biometric authentication systems store biometric data in the cloud or in central databases that can be chopped, this system protects biometric data either in a tamper-proof enclave in the authentication device or in a privacy-friendly form on the blockchain. This reduces the probability of a hash of biometric data and at the same time ensures that an authentication procedure is easy to use and not susceptible to snooping.Another object is to use smart contract based access control rules to automatically execute authentication policies. In contrast to the conventional access methods, the invented method creates programmable access rules for checking an authentication request based on user roles, device confidence level, geographical location, authentication history, etc. These smart contracts automate the process of implementing multi-factor authentication, conditional access enforcement, and non-human access recovery mechanisms. The flexibility and improved security of the system makes it suitable for applications such as enterprise security, official identity verification, financial transactions and management of medical records through the inclusion of smart contracts in the authentication process.The invention also aims to improve the privacy of the users through the use of decentralized identity management mechanisms. This system helps users not have to pass highly sensitive personal information to central sites, as in conventional authentication systems. Off-chain is done by using cryptographic techniques such as zero-know-edge evidence, with which users can prove their identity or access authorisation without confidential information having to be issued. This function is important because it minimizes the risk of unauthorized use of personal identity data for crimal activities as well as tracking of a person's location, which conforms to current privacy and privacy rules.Moreover, the invention aims to improve the efficiency and scalability of authentication processes, since existing authentication solutions based on blockchain have limitations in these aspects. Many mechanisms that focus on authentication with traditional blockchain methods, such as proof-of-work consensus oriented models, often cause high transaction latencies and computational costs. To this end, the proposed system achieves real-time authentication with a processing overhead based on efficient consensus mechanisms, which are proof-of-authority or delegate proof-of-wake systems. Moreover, the authentication device has been developed to allow offline authentication with pre-marked access tokens so that it can function in environments with limited connectivity.The main object of the invention is to provide a simple way of authenticating the request without compromising security. Such authentication solutions achieve their functionality by adding breakpoints by forcing users to note complex keywords, drag hardware security tokens around, or have their identity verified many times using hierarchical processes. Only one biometric scan or a verification of a cryptographic key is required, which facilitates authentication but at the same time allows a very high degree of security for each access. It is designed to operate on various devices such as smart phones, enterprise workstations, IoT devices, and access controls, etc.Moreover, the invention is intended to support secure authentication for new technologies, including decentralized financial (DeFi), Internet of Things security (IoT), and digital identity verification in Web3 applications. As blockchain-based services are being used more and more frequently, a secure and user-controlled authentication mechanism is essential. The aim is to provide a strong authentication barrier to prevent unauthorized access to decentralized platforms, smart reservations or IoT networks. By using cryptographic authentication and blockchain records, the invention prevents fraud and tampering of digital assets by allowing only verified users and devices to perform secure transactions.Only to create a basic context: the invention aims to provide a highly secure authentication framework that can combat emerging cyber threats. Authentic trend biosecure combines our two-factor password free technology and the real-time biometric checking / anti-grooming function in one package and provides a solution for enhanced authentication in the next generation biometric device. The system has security functions ranging from end-to-end cryptography via decentralized key management to AI-based anomaly detection for the detection and containment of authentication fraud. The invention guarantees sustained reliability and loadability in digital identity verification by continuously adapting to newly occurring security challenges.BRIEF DESCRIPTION OF THE FIGUREThese and other features, aspects, and advantages of the present invention will become more fully understood when the following detailed description is read with reference to the accompanying drawings, in which like numerals represent like parts throughout. The following applies here: FIG. 1 shows a block diagram of a system for blockchain-based authentication.Moreover, those skilled in the art will appreciate that elements are shown in the drawing for simplicity and need not necessarily be drawn to scale. For example, the flowcharts illustrate the method using the major steps to improve understanding of aspects of the present disclosure. Moreover, with respect to the construction of the apparatus, one or more components of the apparatus may have been represented in the drawing by conventional symbols, and the drawing may only show the specific details relevant to understanding the embodiments of the present disclosure so as not to obscure the drawing with details readily apparent to those skilled in the art having the benefit of the description herein.DETAILED DESCRIPTION OF THE INVENTIONIn order to aid in the understanding of the principles of the invention, reference will now be made to the embodiment illustrated in the drawings and described in specific language. It is to be understood, however, that no limitation of the scope of the invention is intended, since such changes and further modifications to the illustrated system and such further applications of the principles of the invention as illustrated therein are contemplated, as would normally occur to one skilled in the art to which the invention pertains.It will be understood by those skilled in the art that the foregoing general description and the following detailed description are exemplary and explanatory of the invention and are not intended to be limiting thereof.References throughout this specification to "one aspect," "another aspect," or similar language mean that a particular feature, structure, or characteristic described in connection with the embodiment is included in at least one embodiment of the present disclosure. Thus, the appearances of the phrase "in one embodiment," "in another embodiment," and similar language in this specification may or may not all refer to the same embodiment.The terms "comprises," "comprising," or other variations thereof are intended to cover a non-exclusive inclusion, such that a process or method comprising a list of steps not only comprises those steps, but may also comprise other steps not expressly listed or inherent in such a process or method. Likewise, one or more devices or subsystems or elements or structures or components preceded by "comprises...a" do not exclude, without further limitations, the existence of other devices or other subsystems or other elements or other structures or other components or additional devices or additional subsystems or additional elements or additional structures or additional components.Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention pertains. The system, methods, and examples provided herein are illustrative only and are not to be considered limiting.Embodiments of the present disclosure will be described in detail below with reference to the accompanying drawings.In FIG. 1, a block diagram of a system for blockchain-based authentication is shown. The system 100 includes: a biometric authentication device (102) configured to acquire biometric user data, generate a cryptographic hash of the biometric inputs, and sign the authentication request with a private key stored in a tamper-proof security enclave; a blockchain-based authentication ledger (104) implemented as a distributed ledger network and including multiple validation nodes, the nodes validating authentication requests by a consensus mechanism and invariably storing authentication records; a smart contract-based access management module (106) deployed in the blockchain network and programmed to process authentication transactions, pass through authentication policies, and upon verification issue access tokens; a communication interface (108) integrated with the biometric authentication device that enables secure transmission of authentication requests to the blockchain ledger via wireless protocols including Bluetooth, NFC, and Wi-Fi, or via wired connections such as USB-C; wherein the biometric authentication device generates, upon detecting biometric inputs, an authentication request that includes a signed cryptographic hash of the biometric data, a timestamp, and an authentication identifier transmitted to the blockchain-based authentication register for validation; wherein the blockchain-based authentication register cross-references the received authentication request to stored authentication records and by applying a consensus protocol to determine the legitimacy of the request; wherein the smart contract based access management module performs predefined access policies upon successful verification, generates a time-limited access token, and transmits it to the requesting system to grant authentication based access.In one embodiment, the biometric authentication device (102) comprises: a secure processing unit configured to perform cryptographic operations including key pair generation, hashing biometric data, and signature verification; an embedded biometric sensor module selected from the group consisting of fingerprint scanner, retinal scanner, face recognition module, or speech recognition module configured to acquire and pre-process biometric data; a tamper-proof cryptographic key storage module configured to securely store a user's private key, wherein the module is implemented using a trusted platform module (TPM) or a hardware security module (HSM) to prevent unauthorized extraction of cryptographic credentials; a wireless and wired communication interface that supports Bluetooth Low Energy (BLE), NFC, Wi-Fi, and USB connectivity to enable seamless transmission of authentication requests between multiple devices.In one embodiment, the blockchain-based authentication ledger (104) uses a hybrid consensus protocol selected from the group consisting of proof-of-authority (PoA), delegate proof-of-wake (DPoS), or byzantine fault-tolerant (BFT) consensus to optimize the speed of transaction verification while maintaining cryptographic security and imbibability of the authentication records.In one embodiment, the smart contract-based access management module (106) forces multi-factor authentication (MFA) policies by dynamically requesting additional authentication factors based on context attributes, including, but not limited to, device confidence level, geographic location, and real-time anomaly detection patterns.In one embodiment, the secure processing unit within the biometric authentication device performs biometric feature extraction and cryptographic hashing using an embedded neural processing unit (NPU) or a dedicated AI coprocessor, thus allowing real-time biometric matching and tamper detection before transmitting authentication requests to the blockchain-based authentication register.In one embodiment, the hybrid consensus protocol includes a federated validation model in which selected validation nodes operate under a threshold signature scheme (TSS) to jointly validate authentication transactions. This ensures the cryptographic integrity and at the same time prevents failure of individual nodes from impairing the authentication checking.In one embodiment, the implementation of the multi-factor authentication (MFA) policy dynamically adjusts the authentication strength requirements by analyzing behavior-based authentication metrics including keystroke dynamics, gait detection, and device usage patterns, thus ensuring adaptive authentication based on the user risk score.In one embodiment, the smart contract-based access management module (106) integrates a zero-know-weight proof (ZKP) verification mechanism that allows users to confirm authentication validity without pricing biometric data raw or cryptographic key details, thereby improving privacy in authentication transactions.In one embodiment, the biometric authentication device (102) is configured to operate in an offline authentication mode in which a pre-generated signed access token is stored locally and validated against a cached blockchain synchronized authentication record, thereby enabling authentication in temporary or non-network connectivity environments.In one embodiment, the biometric authentication device communication interface (108) implements postquantene cryptography encryption protocols, including grid-based or hash-based signature schemes, thereby providing long term resistance to quantum computer-based attacks on authentication transactions.A blockchain-based authentication method is provided that uses cryptographic security, biometric authentication and access control mechanisms based on smart contracts and enables a decentralized and tamper-proof authentication process. It is also an object to reduce dependency on centralized authentication mechanisms by eliminating issues related to theft of login information, loss of biometric data, and individual failure points in conventional authentication systems. The system enables secure and privacy protection authentication services in real-time in a multi-domain application environment by providing a blockchain-based authentication ledger, biometric authentication devices with defined secure cryptographic processing, and a dynamic smart contract access management module.The biometric authentication device functions as a secure endpoint in the center of the authentication process by capturing user biometric data and making an authentication request. The device is equipped with a biometric sensor, whether a high precision fingerprint scanner, retina scanner, or face recognition module, and captures and processes the user's biometric inputs. After the transformable biometric data is acquired, a process called feature extraction generates unique identifiers for the input received via an embedded neural processing unit (NPU) or a dedicated artificial intelligence coprocessor (AI). The features resulting from this extraction process are passed to a cryptographic hash algorithm (such as SHA-3 or BLAKE2) which converts the biometric inputs to a secure and irreversible hash value. The authentication request is based on this hash associated with a time stamp and a unique identifier of the authentication request. For reasons of data integrity and security, the authentication request is digitally signed with the private cryptographic key, which is securely stored in a tamper-proof enclave in the biometric authentication device (a trusted platform module (TPM) or a hardware security module (HSM)).Once signed, the request is sent to the blockchain-based authentication registry. The biometric authentication device supports multiple communication modes, from Bluetooth Low Energy (BLE) via near field communication (NFC), WLAN, and USB. When the authentication request is received, the blockchain network initiates a verification process using the hybrid consensus protocol. The consensus mechanism, which may integrate proof-of-authority (PoA), delegate proof-of-wake (DPoS), or byzantine fault tolerance (BFT), guarantees efficient processing of authentication requests while preserving the cryptographic integrity of the authentication records.This authentication request is then validated by a common network of validation nodes, each of which independently validates the digital signature and checks for inconsistencies / replay attacks. This authentication ledger uses a TSS in which multiple validation nodes commonly sign selected authentication transactions and paste them into the blockchain and record information invariably in the blockchain. If the authentication request was legitimate, the authentication record is updated in the blockchain-based authentication ledger and an authentication acknowledgment message is generated, which is forwarded to the smart contract-based access management module for processing.Data between two modules can be separated at a very high level; the first is a smart contract for enforcing authentication policies and access management, while the second is authentication with a verification process to determine whether or not a user is to be granted access. Dynamic Execution of Authentication Rules in the Blockchain Network. Smart contracts deployed in the network perform predefined authentication rules, including multi-factor authentication (MFA) policies, contextual access requests, and call-back mechanisms. For example, in some enhanced security situations, additional factors may be required in the smart contract, such as a hardware cryptography key, or real-time information about the geographic location may be required before access is granted. To ensure even more privacy and security, the system has a zero-know-weight proof verification (ZKP) approach that allows users to verify the authenticity of their authentication without sacrificing their original biometric data or details of the cryptographic key. The smart contract executes the authentication logic that checks the zero knowedge proof. If successful, the user is provided with a time-limited access token that grants the requested access.The system includes an offline authentication mode that allows the user to authenticate in environments where the network is not continuously available. Using this mode, the biometric authentication device creates a pre-marked access token using the previously cached authentication record that was synchronized to the blockchain network during the last connection session. It signs a token in advance and authenticates requests from this token, thereby eliminating the need to invoke the blockchain (which may not be possible at remote locations).The blockchain-based authentication register uses grid-based cryptographic signatures and hash-based digital signature schemes as postquanten cryptographic encryption protocols to save the information, whereby quantum computing is not a threat to authentication security. This guarantees that authentication transactions are secure against opponents with quantum computer capabilities. Moreover, it utilizes a unique approach to selectively recall authentication datasets in which authentication evidence can be recalled during real-time execution, thereby ensuring that enormous blockchain reorganization is not required. This is made possible by a call that is initiated by a Merchle structure and enables new access control policies to be introduced without changing the invariability characteristic of previous authentication records.The system supports delegation of multiple user authentication to enterprise environments. Users can cryptographically delegate authentication permissions to third parties trusted without sacrificing their private biometrics. In business access control use cases, employees granting colleagues or external employees temporary access do not wish to compromise their authentication security.Moreover, the access management module based on an authentication token system is based on smart contracts with real-time validity. The authentication tokens granted by the authentication process also have embedded cryptographic timeouts which result in them running automatically after fixed time intervals or after recall by the underlying blockchain-based authentication register. By ensuring that tokens cannot be reused without appropriate authorisation, the mechanism reduces the effects of session theft attacks.The current invention comprises a blockchain-based authentication that provides security, decentralization and tamper-proof verification of the user identities. This system consists of three basic components: blockchain authentication devices optimized for the end user, decentralized authentication books for secure data storage, and an access management architecture based on smart contracts. These components all work together to enable a more sophisticated authentication process that eliminates the deficiencies of traditional centralized authentication systems.The blockchain authentication device is a mobile and autonomous device that records biometric data and processes authentication requests without the assistance of third party providers. It may be equipped with a high resolution biometric scanner whose operation can be controlled based on finger, retinal or face recognition to meet its security requirements. During authentication by a user, the device reads the biometric inputs and generates a cryptographic hash. This hash is then merged with a time stamped authorization request and signed with the user's private cryptographic key, which can be stored in a secure, tamper-proof enclave in the device. From there, the signed authentication request is sent via a secure communication protocol such as Bluetooth, NFC or Wi-Fi via the blockchain network. It has an integrated OLED display that provides immediate feedback for authentication to the user and thus provides a more transparent and intuitive experience.REFERENCES100 A system for blockchain-based authentication 102 biometric authentication device 104 blockchain-based authentication ledger 106 smart contract-based access management module 108 communication interface

Claims

A blockchain-based authentication system, comprising: a biometric authentication device configured to acquire user biometric data, generate a cryptographic hash of the biometric input, and sign the authentication request with a private key stored in a tamper-proof security enclave; a blockchain-based authentication ledger implemented as a distributed ledger network and comprising a plurality of validation nodes, wherein the nodes validate authentication requests by a consensus mechanism and unalterably store authentication records; a smart contract-based access management module provided in the blockchain network and programmed to process authentication transactions, pass authentication policies, and issue access tokens after verification; a communication interface integrated into the biometric authentication device that enables secure transmission of authentication requests to the blockchain ledger via wireless protocols such as Bluetooth, NFC, and Wi-Fi, or via wired connections such as USB-C; wherein the biometric authentication device generates an authentication request after detecting biometric inputs that includes a signed cryptographic hash of the biometric data, a timestamp, and an authentication identifier that is transmitted to the blockchain-based authentication register for validation; and wherein the smart contract-based access management module performs predefined access policies after successfully verifying, generates a time-limited access token, and transmits it to the requesting system to grant an authentication-based access.The blockchain-based authentication system of claim 1, wherein the biometric authentication device comprises: a secure processing unit configured to perform cryptographic operations including key pair generation, hashing biometric data, and signature verification; an embedded biometric sensor module selected from the group consisting of a fingerprint scanner, a retinal scanner, a face recognition module, or a speech recognition module configured to acquire and pre-process biometric data; a tamper-proof cryptographic key storage module configured to securely store a user's private key, wherein the module is implemented using a trusted platform module (TPM) or a hardware security module (HSM) to prevent unauthorized extraction of cryptographic credentials; a wireless and wired communication interface that supports Bluetooth Low Energy (BLE), NFC, Wi-Fi, and USB connectivity to enable seamless transmission of authentication requests between multiple devices.The blockchain-based authentication system of claim 1, wherein the smart contracts-based access management module passes multi-factor authentication (MFA) policies by dynamically requesting additional authentication factors based on context attributes including, but not limited to, device confidence level, geographic location, and real-time anomaly detection patterns.The blockchain-based authentication system of claim 2, wherein the secure processing unit within the biometric authentication device performs biometric feature extraction and cryptographic hashing using an embedded neural processing unit (NPU) or a dedicated AI coprocessor, thereby allowing real-time biometric matching and tamper detection before transmitting authentication requests to the blockchain-based authentication book.The blockchain-based authentication system of claim 3, wherein the hybrid consensus protocol includes a federated validation model in which selected validation nodes operate under a threshold signature scheme (TSS) to jointly validate authentication transactions to ensure cryptographic integrity while preventing failure of individual nodes from affecting authentication verification.The blockchain-based authentication system of claim 1, wherein the biometric authentication device is configured to operate in an offline authentication mode in which a pre-generated signed access token is stored locally and validated against a cached authentication dataset synchronized to the blockchain, thereby enabling authentication in temporary or non-network connectivity environments.The blockchain-based authentication system of claim 1, wherein the communication interface of the biometric authentication device implements postquantene cryptography encryption protocols including grid-based or hash-based signature schemes, thereby providing long term resistance to quantum computer-based attacks on authentication transactions.

Images