Zero-Knowledge Proof Authentication for Blockchain Transaction Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current blockchain transaction systems rely on single-factor authentication, which is insecure as they do not verify the reliability of the second authentication factor, making them vulnerable to hacking and identity theft.
Innovation Solution
A method involving a proof entity generating a signature and a zero-knowledge proof to verify that candidate authentication data matches reference authentication data, ensuring strong, universal, and reliable authentication by transmitting only hash values and zero-knowledge proofs to a verification entity, without disclosing actual authentication data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If single-factor authentication (private key) is used for blockchain transactions, then ease of operation is improved, but security and reliability deteriorate
Solution Approach 1:
The patent combines multiple authentication factors (private key possession + biometric verification) into a unified authentication mechanism. The proof entity merges cryptographic proof with zero-knowledge proof of biometric matching, creating a composite authentication system that maintains ease of use while significantly enhancing security against hacking and identity theft.
Solution Approach 2:
The patent introduces a zero-knowledge proof mechanism as an intermediary that allows the verification entity to confirm authentication validity without accessing actual biometric data or private keys. This intermediary layer enables strong authentication while preserving security and preventing credential exposure.
2Reliability
If mobile terminal with biometric verification is used for authentication, then authentication reliability is improved, but trustworthiness of the system deteriorates because the terminal could have been hacked
Solution Approach 1:
The patent extracts the authentication verification process from the user's mobile terminal and relocates it to a trusted verification entity. By taking out the critical verification function, the system eliminates the security vulnerability of the terminal while maintaining convenient biometric authentication for the user.
Solution Approach 2:
The verification entity acts as a trusted intermediary that performs authentication verification outside the user's potentially compromised terminal. This intermediary approach allows the system to achieve strong authentication reliability without depending on the trustworthiness of the user's device.
3Reliability
If multiple authentication factors are implemented, then security is improved, but device complexity increases
Solution Approach 1:
The proof entity autonomously generates the zero-knowledge proof of biometric matching without requiring complex coordination between multiple devices. The self-service approach simplifies the system architecture by enabling the authentication proof to be created and verified in a streamlined manner, reducing overall device complexity while maintaining strong security.
Data Source
AI summary
The present invention relates to a method of processing a transaction sent from a proof entity (1) connected to a verification entity (2);the proof entity (1) having at least one secret key and a candidate authentication data, the verification entity (2) having the hash value of a reference authentication data;the method comprising the steps of:(a) generation by data processing means (11) of the proof entity (1) of:a signature of the proof entity (1) from said secret key;a zero-knowledge proof of the fact that the candidate authentication data and the reference authentication data match;(b) transmission to the verification entity (2) of transaction data comprising at least:said signature of the proof entity (1);said zero-knowledge proof;(c) verification by the data processing means (21) of the verification entity (2) that said signature of the proof entity (1) and the zero-knowledge proof are valid;(d) processing said transaction.