Zero-Knowledge Authentication Using Bluetooth Signals and zk-SNARKs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods face challenges in ensuring data privacy and security, particularly in digital environments, with risks of identity theft, personal information sharing, and high installation and maintenance costs, while existing solutions do not effectively support zero-knowledge proof authentication.
Innovation Solution
A system and method utilizing Bluetooth and Wi-Fi signals, combined with GROTH 16 zk-SNARK scheme on the Mina blockchain, enables authentication without sharing personal information, using a mobile application to interpret signals, generate zero-knowledge proofs, and establish a WEB RTC channel for secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If digital authentication is performed by sharing personal information (Citizen Identification No, telephone number, e-mail address, device ID, MAC address), then authentication can be completed remotely without visiting institutions, but data privacy and security are compromised due to necessary sharing of personal information
Solution Approach 1:
The patent introduces a zero-knowledge proof mechanism as an intermediary between the user and the authentication system. This intermediary allows the system to verify identity without directly accessing or storing personal information. The zero-knowledge proof acts as a mediator that transfers authentication capability while preserving privacy, enabling remote authentication without the traditional trade-off of sharing sensitive data.
Solution Approach 2:
The patent extracts the essential authentication function from personal information itself. Instead of using Citizen Identification No, telephone numbers, or device IDs as the basis for authentication, the system extracts only the necessary proof of identity through zero-knowledge proofs. This extraction allows authentication to proceed while leaving personal information behind, thus resolving the contradiction between remote access and privacy protection.
2Measurement precision
If biometric verification systems with sensors (cameras, fingerprint readers, infrared scanners) are used, then authentication accuracy is high, but installation and maintenance costs are high
Solution Approach 1:
The patent replaces the mechanical and hardware-based biometric verification system (cameras, fingerprint readers, infrared scanners) with a cryptographic software-based solution. Instead of relying on physical sensors and complex hardware infrastructure, the system uses zero-knowledge proof mathematics implemented in software. This substitution dramatically reduces installation and maintenance costs while maintaining or even improving authentication accuracy through cryptographic security.
3Ease of operation
If card control systems with RF-ID and magnetic methods are used, then authentication can be performed portably, but user cards can be compromised, lost, deformed, and misused by other individuals
Solution Approach 1:
The patent replaces the physical card object with its cryptographic equivalent - a zero-knowledge proof credential stored in the mobile device's secure element. This cryptographic copy contains all the necessary authentication information without the vulnerabilities of physical cards. The digital credential can be securely copied and stored in the device's secure storage, eliminating risks of physical loss, damage, or unauthorized copying while maintaining portability.
Solution Approach 2:
The patent combines multiple security layers in a composite authentication system: secure element hardware, cryptographic algorithms, and zero-knowledge proof protocols. This composite approach creates a more reliable authentication system than any single component alone, protecting against the vulnerabilities of traditional card systems while maintaining ease of use. The multi-layered security architecture ensures that even if one layer is compromised, the overall system remains secure.
Data Source
AI summary
Disclosed is a system and method for authentication with zero-knowledge proof used in environments where authentication is required.