FORT: Right-Proving and Attribute-Blinding Self-Sovereign Authentication
Nowadays, there are a plethora of services that are provided and paid for online, such as video streaming subscriptions, car-share, vehicle parking, purchasing tickets for events, etc. Online services usually issue tokens that are directly related to the identities of their users after they sign up...
| Main Authors: | , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
MDPI AG
2022-02-01
|
| Series: | Mathematics |
| Subjects: | |
| Online Access: | https://www.mdpi.com/2227-7390/10/4/617 |
| _version_ | 1797478308276862976 |
|---|---|
| author | Xavier Salleras Sergi Rovira Vanesa Daza |
| author_facet | Xavier Salleras Sergi Rovira Vanesa Daza |
| author_sort | Xavier Salleras |
| collection | DOAJ |
| description | Nowadays, there are a plethora of services that are provided and paid for online, such as video streaming subscriptions, car-share, vehicle parking, purchasing tickets for events, etc. Online services usually issue tokens that are directly related to the identities of their users after they sign up to a platform; users need to authenticate themselves by using the same credentials each time they use the service. Likewise, when using in-person services, such as going to a concert, after paying for this service, the user usually receives a ticket, which proves that he/she has the right to use that service. In both scenarios, the main concerns surround the centralization of these systems and that they do not ensure customers’ privacy. The involved service providers are trusted third parties—authorities that offer services and handle private data about users. In this paper, we designed and implemented FORT, a decentralized system that allows customers to prove their rights to use specific services (either online or in-person) without revealing sensitive information. To achieve decentralization, we proposed a solution where all of the data are handled by a blockchain. We describe and uniquely identify users’ rights using non-fungible tokens (NFTs), and possession of these rights is demonstrated by using zero-knowledge proofs—cryptographic primitives that allow us to guarantee customers’ privacy. Furthermore, we provide benchmarks of FORT, which show that our protocol is efficient enough to be used in devices with low computing resources, such as smartphones or smartwatches, which are devices commonly used in our use case scenario. |
| first_indexed | 2024-03-09T21:30:07Z |
| format | Article |
| id | doaj.art-0bb401a21da3449faa4e8faad31cce56 |
| institution | Directory Open Access Journal |
| issn | 2227-7390 |
| language | English |
| last_indexed | 2024-03-09T21:30:07Z |
| publishDate | 2022-02-01 |
| publisher | MDPI AG |
| record_format | Article |
| series | Mathematics |
| spelling | doaj.art-0bb401a21da3449faa4e8faad31cce562023-11-23T20:57:32ZengMDPI AGMathematics2227-73902022-02-0110461710.3390/math10040617FORT: Right-Proving and Attribute-Blinding Self-Sovereign AuthenticationXavier Salleras0Sergi Rovira1Vanesa Daza2Department of Information and Communication Technologies, Universitat Pompeu Fabra, 08002 Barcelona, SpainDepartment of Information and Communication Technologies, Universitat Pompeu Fabra, 08002 Barcelona, SpainDepartment of Information and Communication Technologies, Universitat Pompeu Fabra, 08002 Barcelona, SpainNowadays, there are a plethora of services that are provided and paid for online, such as video streaming subscriptions, car-share, vehicle parking, purchasing tickets for events, etc. Online services usually issue tokens that are directly related to the identities of their users after they sign up to a platform; users need to authenticate themselves by using the same credentials each time they use the service. Likewise, when using in-person services, such as going to a concert, after paying for this service, the user usually receives a ticket, which proves that he/she has the right to use that service. In both scenarios, the main concerns surround the centralization of these systems and that they do not ensure customers’ privacy. The involved service providers are trusted third parties—authorities that offer services and handle private data about users. In this paper, we designed and implemented FORT, a decentralized system that allows customers to prove their rights to use specific services (either online or in-person) without revealing sensitive information. To achieve decentralization, we proposed a solution where all of the data are handled by a blockchain. We describe and uniquely identify users’ rights using non-fungible tokens (NFTs), and possession of these rights is demonstrated by using zero-knowledge proofs—cryptographic primitives that allow us to guarantee customers’ privacy. Furthermore, we provide benchmarks of FORT, which show that our protocol is efficient enough to be used in devices with low computing resources, such as smartphones or smartwatches, which are devices commonly used in our use case scenario.https://www.mdpi.com/2227-7390/10/4/617zero-knowledge proofszk-SNARKsbulletproofsapplied cryptographyself-sovereignInternet of Things |
| spellingShingle | Xavier Salleras Sergi Rovira Vanesa Daza FORT: Right-Proving and Attribute-Blinding Self-Sovereign Authentication Mathematics zero-knowledge proofs zk-SNARKs bulletproofs applied cryptography self-sovereign Internet of Things |
| title | FORT: Right-Proving and Attribute-Blinding Self-Sovereign Authentication |
| title_full | FORT: Right-Proving and Attribute-Blinding Self-Sovereign Authentication |
| title_fullStr | FORT: Right-Proving and Attribute-Blinding Self-Sovereign Authentication |
| title_full_unstemmed | FORT: Right-Proving and Attribute-Blinding Self-Sovereign Authentication |
| title_short | FORT: Right-Proving and Attribute-Blinding Self-Sovereign Authentication |
| title_sort | fort right proving and attribute blinding self sovereign authentication |
| topic | zero-knowledge proofs zk-SNARKs bulletproofs applied cryptography self-sovereign Internet of Things |
| url | https://www.mdpi.com/2227-7390/10/4/617 |
| work_keys_str_mv | AT xaviersalleras fortrightprovingandattributeblindingselfsovereignauthentication AT sergirovira fortrightprovingandattributeblindingselfsovereignauthentication AT vanesadaza fortrightprovingandattributeblindingselfsovereignauthentication |