Combating Identity Attacks in Online Social Networks: A Multi-Layered Framework Using Zero-Knowledge Proof and Permissioned Blockchain

Abstract

Identity attacks, such as impersonation, identity theft, and fraudulent account creation, pose significant threats to the security and trustworthiness of Online Social Networks (OSNs). In this paper, we propose a robust and secure framework to verify user identities without compromising their privacy by developing a multi-layered framework leveraging zero-knowledge proof (ZKP) and Hyperledger Fabric private blockchain. We introduce a blockchain-based government identity provider system, coupled with a zero-knowledge proof-based signup process for social networks. Our prototype authenticates user identities in multiple layers, effectively mitigating fraudulent, cloned, and multiple account creations. Our experiments with n (n = 50) users showed a 100% success rate for our system, highlighting its effectiveness compared to other OSNs.