Blockchain User Authentication via Non-Fungible Token Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional user authentication methods using blockchain face limitations in configuring attribute information and maintaining privacy, as they rely solely on public keys and struggle with token duplication and ownership verification.
Innovation Solution
A method and apparatus for user authentication based on a non-fungible token generated using a smart contract, where an authentication management server receives authentication information and unique device values, determines token validity and ownership, and authenticates users within a blockchain network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If public key infrastructure is used for user authentication in blockchain, then authentication can be performed, but various attribute information cannot be configured and privacy is exposed
Solution Approach 1:
The authentication system is segmented into multiple components: user information is divided into public attributes (stored on blockchain) and private attributes (stored locally in encrypted form). The authentication token is segmented to contain only necessary verification data without exposing full user identity, thus enabling attribute configuration while protecting privacy.
Solution Approach 2:
An authentication management server acts as an intermediary between the user and the blockchain network. It manages the smart contracts, handles token generation and verification, and coordinates authentication processes without requiring users to directly expose their private information to the blockchain, thus enabling versatile authentication while maintaining privacy.
2Reliability
If conventional blockchain authentication is used, then authentication can be performed, but token duplication and ownership verification become difficult
Solution Approach 1:
The system performs preliminary actions by generating and registering authentication tokens with unique identifiers and ownership information in advance through smart contracts. Each token is pre-configured with verification mechanisms and ownership data, enabling reliable authentication while simplifying subsequent verification processes through automated contract execution.
3Ease of operation
If central server stores authentication information, then authentication can be performed, but delegation is impossible and reissue is required when smartphone is lost
Solution Approach 1:
The authentication token is designed with multi-functionality: it serves as both a personal authentication credential and a delegatable authorization instrument. The smart contract enables the token to be transferred or delegated to other users while maintaining security, allowing the same token structure to support both personal use and delegation scenarios without requiring reissue.
Data Source
AI summary
A user authentication method performed by an authentication management server constituting a block chain network with a target device may comprise receiving, from the target device, a transaction including authentication information of a user and a unique value of the target device; determining a token of the user stored in a smart contract based on the authentication information; and authenticating the user based on validity information of the token, ownership information of the token, and the transaction.