PKI Authentication of Blockchain Addresses Before Irreversible Transfers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current blockchain technology lacks a straightforward mechanism for verifying recipient addresses, particularly for unsophisticated users, leading to potential errors and fraudulent transactions due to the irreversible nature of blockchain transactions.
Innovation Solution
Utilization of public key infrastructure (PKI) to authenticate blockchain addresses by linking certificate information and signed messages, enabling verification of identity information associated with blockchain addresses.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If blockchain transactions are made irreversible for security, then reliability is improved, but ease of operation deteriorates due to inability to correct errors
Solution Approach 1:
The system performs verification of recipient address ownership before the transaction is executed. The sender obtains and verifies a signed message from the recipient confirming they own the address, and this verification occurs before funds are transferred, allowing errors to be caught pre-transaction rather than requiring post-transaction correction
2Ease of operation
If blockchain address verification mechanisms are simplified for unsophisticated users, then ease of operation is improved, but measurement precision deteriorates due to reduced verification capability
Solution Approach 1:
The system introduces an intermediary verification mechanism using signed messages and public key infrastructure. Instead of requiring users to directly verify complex cryptographic addresses, the system uses a signed message from the address owner as intermediary proof of ownership, making verification accessible to unsophisticated users while maintaining cryptographic precision through the underlying PKI mechanisms
3Reliability
If public key infrastructure is implemented for address authentication, then reliability is improved, but device complexity increases due to additional verification steps
Solution Approach 1:
The system extracts the complex cryptographic verification logic into a separate, standardized PKI layer. The core blockchain transaction logic remains simple, while the authentication complexity is isolated to the signed message verification process, which can be implemented as a modular component rather than embedding complexity throughout the entire transaction system
Data Source
AI summary
Techniques are disclosed relating to determining identity information of a user associated with a blockchain address. An application of a first user can receive information indicative of a blockchain address of a second user. This information either includes or is usable to retrieve a certificate of the second user, which is signed by a private key of a certificate authority (CA), and which includes identity information of the second user. The application of the first user can verify the certificate using a public key of the CA. The application of the first user can then cause identity information of the second user to be included in a user interface presented to the first user. This information allows the first user to have more information about the second user before commencing an irreversible blockchain transaction with that user.