Privacy‐Preserving and Scalable Authentication Using zk‐SNARK‐Based ZKP Blockchain PKI

Le résumé fourni par la source

Public key infrastructure (PKI) establishes secure communication over digital interfaces and authorized access to technology resources. Traditional PKI systems have weaknesses such as key compromise, trust management failure, escalated vulnerabilities due to a unitary point of failure, and other shortcomings, unlike basic PKI Models, which operate with a certificate authority (CA) centrally. The study proposes blockchain PKI based on zero-knowledge proofs (ZKP), which, with the use of zk-SNARKs, strives to make existing frameworks more efficient and secure. Enhanced privacy guarantees from zk-SNARKs, alongside distributed blockchain, facilitate this. The blockchain acts as an all-encompassing store for certificates where personal privacy is maintained while validation is conducted. Humans can be less dependent on smart contracts, which automate the issuance, validation, and revocation of certificates, enhancing privacy. These characterize the system with ideal universal deployment along with control for execution speed, storage requirements, network responsiveness, and performance. In addition to the performance assessment for those factors, the system was evaluated for scalability, storage, throughput, and the overhead of communication and computing resources, all measured against efficiency. Research validated the operational correctness of the system regarding authentication within corporate, financial, Internet of Things, and distributed systems identity management frameworks. Adding zk-SNARKs enhances future advancements in scalability, cost-efficient contract execution, and privacy-boosted security through machine learning. The blockchain PKI constructed on zk-SNARKs offers a distributed and scalable solution to authentication without compromising the privacy of the users, thus solving the problems of existing PKI frameworks.

Ce résumé expose les affirmations des auteurs. BNTIC ne l’interprète pas comme une validation indépendante des résultats.