Blockchain Identity Verification via Random Transaction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current verification code systems in multi-factor authentication rely on external devices or centralized servers, which are vulnerable to security threats and high maintenance costs, lacking user control over verification information generation.
Innovation Solution
A client generates a verification code through a decentralized blockchain-based data platform by initiating a random transaction between accounts, which is recorded and used to create a unique verification code, with the server verifying the code's validity based on the transaction record, ensuring unchangeable and undeletable records.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a server generates and transmits verification codes to users, then the verification process can be completed, but the system becomes vulnerable to security threats and Trojan horses on user devices
Solution Approach 1:
Instead of the server generating and sending the verification code to the client, the client generates the verification code locally using blockchain technology and sends it back to the server for verification. This inversion eliminates the security vulnerability of transmitting verification codes through potentially compromised user devices, as the code is now generated on the user's own device using trusted blockchain algorithms.
Solution Approach 2:
The patent introduces blockchain technology as an intermediary mechanism between the client and server. The blockchain provides a decentralized, tamper-proof verification mechanism that allows the client to generate verification codes using cryptographic algorithms stored on the blockchain, ensuring the code generation process is secure and cannot be compromised by traditional client-side threats.
2Reliability
If UKey devices are allocated to all users for verification, then authentication security is improved, but the cost of maintaining a massive random number synchronization system increases significantly
Solution Approach 1:
The patent enables each client to independently generate verification codes using cryptographic algorithms stored on the blockchain, without requiring a centralized random number synchronization system. Each user's device autonomously performs the verification code generation using their own private keys and the public blockchain ledger, eliminating the need for expensive centralized infrastructure and reducing maintenance costs.
Solution Approach 2:
Instead of requiring physical UKey devices for each user, the patent uses cryptographic key pairs (private and public keys) stored digitally on user devices and the blockchain. The verification code is generated by copying and processing the private key with blockchain-stored algorithms, providing the same security function as physical UKeys but without the infrastructure overhead.
3Reliability
If verification codes are generated synchronously by server and client, then mutual authentication is achieved, but the user cannot control verification information initiatively
Solution Approach 1:
The patent implements preliminary action by having the client generate the verification code first using their private key and blockchain-stored algorithms, then send it to the server for verification. This allows the user to initiate and control the verification process actively, rather than passively receiving a code from the server, while still achieving mutual authentication through the blockchain verification mechanism.
Data Source
AI summary
A client, a server, a method and an identity verification system are provided. The client is configured to generate a verification code and includes: a transaction initiating unit configured to initiate, in response to a predetermined identity verification event regarding a user, a random transaction between a first account and a second account in a data platform system, so that the random transaction is recorded in the data platform system; a verification code generating unit configured to generate, based on at least information about the random transaction, a verification code for verifying an identity of the user; and a sending unit configured to send the generated verification code to a server, so that the server verifies the identity of the user according to a record of the random transaction and the verification code, the data platform system being a decentralized distributed database and records therein being unchangeable and undeletable.