| Identity authentication serves as the fundamental credential for users accessing internet platforms.In the era of Web 2.0,user identity information needs to be hosted as accounts on various internet platforms.While traditional internet platforms provide convenience to users,they also pose challenges in terms of lacking digital identity autonomy and user data sovereignty.On one hand,the security and privacy of user data hosted on internet platforms depend on the platform’s management level,which exposes the risk of intentional or unintentional data breaches.On the other hand,the lack of data sovereignty results in passive control of identity information once users register their digital identity on a platform.To address the aforementioned issues,this thesis proposes a mobile login identity authentication scheme incorporating blockchain technology.By leveraging the decentralized ledger and immutability characteristics of blockchain distributed ledger technology,in conjunction with smart contracts,this scheme aims to enhance user autonomy over their digital identity and data sovereignty.The main research contributions and innovations of this thesis are as follows:First,through a comparison of various authentication technologies,the thesis demonstrates that combining mobile devices with blockchain-based authentication can address the lack of identity autonomy and data sovereignty in traditional identity authentication to a certain extent.Second,a blockchain-based mobile identity authentication scheme is proposed.This scheme utilizes smart contracts and Chain Link oracles to achieve decentralized mobile number registration,thereby obtaining an independent blockchain-based user digital identity.While ensuring the independence of user digital identities,the scheme classifies data into static and dynamic categories based on their characteristics.Access control is implemented for static data using elliptic curve signatures combined with Merkle proofs,and dynamic data is shared using authorized access registries and shared keys,thereby enhancing user data autonomy.Third,a prototype system for identity authentication is designed and implemented based on the Ethereum platform in conjunction with Chain Link oracles.The feasibility and effectiveness of the system are validated through experimentation and evaluation.The proposed blockchain-based mobile login identity authentication scheme offers a promising solution to enhance user autonomy and data sovereignty.It provides a secure and transparent framework that empowers users to maintain control over their digital identity and data.The findings of this research contribute to the advancement of identity authentication and data privacy in the context of digital platforms. |
