Cost-Efficient Anonymous Authentication Scheme Based on Set-Membership Zero-Knowledge Proof

Abstract

In this paper, we propose zero-knowledge named proof, a replay attack prevention scheme that ensures the user's anonymity against malicious administrators. We begin with adopting the zero-knowledge set-membership proof into an authentication setting in which users would delegate their requests to an agent that obstructs the user's identity from the administrator. This anonymous agent carries the guarantee of authenticity, which the administrator through the set-membership proof can confirm. Next, we prevent replay attacks from other parties by binding the agent's identity to the delegation request verifiable by the administrators. By leveraging these properties, a blockchain-based authentication scheme is then built. We quantitatively evaluate the security, cost-efficiency, and performance of our scheme and provide a third-party authorization scheme from our authentication framework to demonstrate its real-world relevancy.