Transforming face-to-face identity proofing into anonymous digital identity using the Bitcoin blockchain
This work addresses the need for secure and anonymous identity verification in digital services, offering a novel approach that combines blockchain with cryptographic techniques, though it appears incremental by building on existing schemes like Brands' commitments.
The authors tackled the problem of creating anonymous digital identities from face-to-face proofing by proposing a system that uses Bitcoin's blockchain to store commitments instead of hashes, enabling zero-knowledge proofs for validation while ensuring user confidentiality and bandwidth efficiency through Merkle trees.
The most fundamental purpose of blockchain technology is to enable persistent, consistent, distributed storage of information. Increasingly common are authentication systems that leverage this property to allow users to carry their personal data on a device while a hash of this data is signed by a trusted authority and then put on a blockchain to be compared against. For instance, in 2015, MIT introduced a schema for the publication of their academic certificates based on this principle. In this work, we propose a way for users to obtain assured identities based on face-to-face proofing that can then be validated against a record on a blockchain. Moreover, in order to provide anonymity, instead of storing a hash, we make use of a scheme of Brands to store a commitment against which one can perform zero-knowledge proofs of identity. We also enforce the confidentiality of the underlying data by letting users control a secret of their own. We show how our schema can be implemented on Bitcoin's blockchain and how to save bandwidth by grouping commitments using Merkle trees to minimize the number of Bitcoin transactions that need to be sent. Finally, we describe a system in which users can gain access to services thanks to the identity records of our proposal.