FORT: Right-Proving and Attribute-Blinding Self-Sovereign Authentication

Xavier Salleras, Sergi Rovira and Vanesa Daza
Additional contact information
Xavier Salleras: Department of Information and Communication Technologies, Universitat Pompeu Fabra, 08002 Barcelona, Spain
Sergi Rovira: Department of Information and Communication Technologies, Universitat Pompeu Fabra, 08002 Barcelona, Spain
Vanesa Daza: Department of Information and Communication Technologies, Universitat Pompeu Fabra, 08002 Barcelona, Spain

Mathematics, 2022, vol. 10, issue 4, 1-18

Abstract: Nowadays, there are a plethora of services that are provided and paid for online, such as video streaming subscriptions, car-share, vehicle parking, purchasing tickets for events, etc. Online services usually issue tokens that are directly related to the identities of their users after they sign up to a platform; users need to authenticate themselves by using the same credentials each time they use the service. Likewise, when using in-person services, such as going to a concert, after paying for this service, the user usually receives a ticket, which proves that he/she has the right to use that service. In both scenarios, the main concerns surround the centralization of these systems and that they do not ensure customers’ privacy. The involved service providers are trusted third parties—authorities that offer services and handle private data about users. In this paper, we designed and implemented FORT, a decentralized system that allows customers to prove their rights to use specific services (either online or in-person) without revealing sensitive information. To achieve decentralization, we proposed a solution where all of the data are handled by a blockchain. We describe and uniquely identify users’ rights using non-fungible tokens (NFTs), and possession of these rights is demonstrated by using zero-knowledge proofs—cryptographic primitives that allow us to guarantee customers’ privacy. Furthermore, we provide benchmarks of FORT, which show that our protocol is efficient enough to be used in devices with low computing resources, such as smartphones or smartwatches, which are devices commonly used in our use case scenario.

Keywords: zero-knowledge proofs; zk-SNARKs; bulletproofs; applied cryptography; self-sovereign; Internet of Things; authentication; NFT (search for similar items in EconPapers)
JEL-codes: C (search for similar items in EconPapers)
Date: 2022
References: View references in EconPapers View complete reference list from CitEc
Citations: View citations in EconPapers (1)

Downloads: (external link)
https://www.mdpi.com/2227-7390/10/4/617/pdf (application/pdf)
https://www.mdpi.com/2227-7390/10/4/617/ (text/html)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:gam:jmathe:v:10:y:2022:i:4:p:617-:d:751389

Access Statistics for this article

Mathematics is currently edited by Ms. Emma He

More articles in Mathematics from MDPI
Bibliographic data for series maintained by MDPI Indexing Manager ().