by Christopher Wiraatmaja, Shoji Kasahara.
This paper extends our previous work and submitted at ACM: Distributed Ledger Technologies: Research and Practice.
DOI: 10.1145/3676285
We proposed a novel delegation scheme, called zkNamedProof, which binds the authentication proof to a designated anonymous agent, preventing both privacy and security attacks. Using this technique, we developed a blockchain-based authentication scheme that is cost-efficient and responsive compared to prior works.
We provided our proposed anonymous authentication scheme as follows:
Our Proposed Authentication Scheme
Using our proposed technique, our scheme achieved cheaper expected gas cost and competitive time performance to access the devices without sacrificing security or privacy aspects, resulting in better overall scalability. Here are the results of our experiments:
In this paper, we propose zero-knowledge named proof, a stateless replay attack prevention strategy that ensures the user's anonymity against malicious administrators. We begin with adopting the zero-knowledge set-membership proof into an authentication setting in which users would delegate their requests to an agent that obstructs the user's identity from the administrator. This anonymous agent carries the guarantee of authenticity, which the administrator through the set-membership proof can confirm. Next, we prevent replay attacks from other parties by binding the agent's identity to the authentication proof verifiable by the administrators. By leveraging these properties, a scalable blockchain-based authentication scheme is then built. We quantitatively evaluate the security and measure the time and monetary cost of our scheme under both ideal and realistic environments. On top of it, we provide a third-party authorization scheme derived from our authentication framework to demonstrate its real-world applicability.
We utilized ZoKrates to implement our proposed technique and deploy the work in a private Ethereum node using Hardhat.
Please clone this repository using your Git client by running
git clone https://github.com/christopherwira/scalable-anon-auth-zk-set-membership.git
Our implementation requires the following dependencies:
- Python
3.12
or newer - ZoKrates
0.8.7
or newer - Hardhat
2.20.1
or newer - NodeJS
20.11.1
or newer
We recommend the user to utilize Anaconda to create the required environment.
After setting up the requirement, we can install the required Python packages using the following command
pip install -r requirements.txt
After ensuring all the previous dependencies is installed, we can continue to the next process.
We provide the required metadata to run the Hardhat node in the hardhat
directory, which contains two sub-directories.
On the hardhat_development
directory, run the following command
npx hardhat node --port 8545
On the hardhat_production
directory, run the following command
npx hardhat node --port 8546
Make sure that the Ethereum node is running on both port 8545
and 8546
.
We provide the notebook used in our experiment in this repository. To open the notebook, it is required to run the Jupyter node using the command jupyter lab
.
All the provided code should work if all the previous dependencies are installed correctly.
If there is a problem with the installation or dependencies, please feel free to submit an issue on this repository.
All source code is made available under the terms of the MIT license.