Zero-Knowledge Certificate Service on Blockchain
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The challenge lies in securely managing and verifying user identity information on a blockchain network while preventing privacy infringement and unwanted identification, as centralized data storage poses risks of leakage and public keys correspond to private keys, necessitating encryption and secure verification methods.
Innovation Solution
A method utilizing zero-knowledge proof and commitment schemes to securely register and verify user identity information on a blockchain network, where user identity information is encrypted and bound using a commitment scheme, preventing alteration and disclosure, and allowing verification without exposing the information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If user identity information is stored in a centralized database, then verification is simplified, but the risk of information leakage and infringement increases
Solution Approach 1:
The patent introduces a commitment scheme as an intermediary mechanism between the user identity information and the blockchain storage. The commitment scheme (C(m), o) allows the system to store a commitment to the identity information rather than the information itself, enabling verification through zero-knowledge proofs without exposing the actual identity data, thus reducing leakage risk while maintaining verification capability
Solution Approach 2:
The patent extracts the essential verification property from the identity information by using zero-knowledge proofs. Instead of storing and directly using the identity information for verification, the system extracts a cryptographic proof that attests to the validity of the information without revealing it, separating the verification function from the sensitive data
2Object-affected harmful factors
If personal information is encrypted and registered in the distributed ledger, then privacy protection is improved, but the risk of key correspondence and unauthorized identification remains
Solution Approach 1:
The commitment scheme serves as a mediator that breaks the direct correspondence between stored data and original identity information. By storing commitments rather than encrypted identities, the system prevents both unauthorized decryption and unwanted identification, as the commitment cannot be reversed to obtain the original information or derive identifying characteristics
Solution Approach 2:
The patent creates a cryptographic copy (commitment) of the identity information that preserves verification functionality while eliminating privacy risks. The commitment C(m) is a one-way transformation that can be verified against zero-knowledge proofs but cannot be used to reconstruct or identify the original information, effectively copying the verification property without copying the sensitive data
3Measurement precision
If user identity information is disclosed for verification, then verification accuracy is improved, but unwanted identification and tracking increase
Solution Approach 1:
The patent extracts only the necessary verification property from the identity information through zero-knowledge proofs. The system obtains a cryptographic proof that attests to the validity of the identity information without obtaining or disclosing the actual identity data, achieving verification accuracy while eliminating unwanted identification and tracking risks
Data Source
AI summary
The present invention relates to a zero-knowledge proof-based certificate service method using a blockchain network, the method comprising: (a) a step in which, if a certificate registration request transaction including user trap information generated by using at least one user personal information corresponding to a user and a private key of the user is acquired from a user terminal, a certification support server confirms whether or not the user personal information included in the certificate registration request transaction is authentic; (b) a step in which, if it is confirmed that the user personal information corresponds to the user, the certification support server computes the user personal information and the user trap information included in the certificate registration request transaction by using a commitment scheme, thereby generating a user commitment corresponding to the user personal information; and (c) a step in which the certification support server transmits a certificate transaction including the user commitment to the blockchain networks such that the blockchain network registers the certificate transaction in a distributed ledger.