PKI Authentication via Blockchain Smart Contracts

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing password-based authentication systems for web services are insecure due to password transmission risks, central storage vulnerabilities, and user password management challenges, leading to compromised credentials and security breaches.

Innovation Solution

Implementing a Public Key Infrastructure (PKI) based on blockchain technology for user authentication, where users authenticate using a public-private key pair, with the private key stored on personal devices and the public key used for verification, thereby eliminating the need for password transmission and central storage.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If password-based authentication is used, then user authentication can be performed, but security is compromised due to password transmission risks and central storage vulnerabilities

Engineering Contradiction:

Improveauthentication securityVSAvoidpassword theft and credential breaches

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent extracts the authentication credential from the traditional password form and replaces it with cryptographic key pairs. The private key is extracted from central storage and placed on the user's device, while the public key is extracted from the credential verification process and stored on the server. This extraction eliminates the need for transmitting sensitive passwords over the network.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces cryptographic key pairs as an intermediary between the user and the authentication system. Instead of directly transmitting passwords, the system uses public-key cryptography where the public key acts as a mediator for verification. The smart contract on the blockchain serves as an intermediary that verifies signatures without exposing private keys or passwords.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Ease of operation

If passwords are centrally stored, then authentication can be managed, but central storage vulnerabilities create security risks

Engineering Contradiction:

Improvelogin managementVSAvoidcentral storage vulnerabilities

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent segments the authentication credential into two separate parts: the private key stored locally on the user's device and the public key stored on the server. This segmentation eliminates the need for central storage of sensitive credentials while maintaining centralized authentication management through the smart contract that verifies signatures.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The user's device performs self-service authentication by locally generating and storing the private key, and using it to sign authentication challenges. The device itself manages the sensitive credential without requiring transmission to or storage on central servers, thereby eliminating central storage vulnerabilities.

Inventive Principle:

Principle #25Self-service

3Adaptability or versatility

If users manage multiple passwords, then access to multiple servers is enabled, but password management becomes complex and error-prone

Engineering Contradiction:

Improvemulti-server accessVSAvoidpassword management

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent makes the cryptographic key pair universal across multiple servers. The same public-private key pair can be used to authenticate to any server that implements the smart contract authentication mechanism. This eliminates the need for users to manage multiple different passwords while maintaining access to multiple services.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS12341901B1PKI-based user authentication for web services using blockchain

Publication Date: 2025.06.24 UNITED SERVICES AUTOMOBILE ASSOCIATION (USAA)

AI summary

Methods, systems, storage media for authentication are described. On the methods includes receiving, at a smart contract on a distributed ledger, a signed authentication challenge. The method includes verifying the identity of the user who signed authentication challenge. The method includes raising an event that indicates that the user has been authenticated; wherein a server listens for events from the smart contract, and associates a session between the browser and the server with the user based on the event.