A Privacy-Preserving Route Verification Framework Using Zero-Knowledge Proofs and Blockchain in Inter-Domain Routing

Abstract

The Border Gateway Protocol (BGP) experiences multiple security threats during inter-domain routing such as prefix hijacking and route leaks and man-in-the-middle attacks. Resource Public Key Infrastructure (RPKI) and BGPsec along with other security solutions authenticate networks better but lack protection of network privacy and exhibit weaknesses due to concentration of authority. This paper introduces an integrated ZKP-based Route Verification Framework which uses blockchain technology to establish tamper-resistant privacy-preserving route validation. The framework includes five fundamental elements that provide ZKP proof generation for route credentials and blockchain-based proof storage and automated proof verification with BGP extension and off-chain IPFS-based proof management systems. The system architecture uses zk-SNARKs for cryptographic verifications while it relies on Hyperledger Fabric for decentralized proof validation. The proposed solution achieved superior routing security because it maintains both efficient storage scalability and minimal computational overhead according to performance testing results. The system results show that this framework provides adequate capabilities for actual Internet Service Provider deployments which support decentralized routing across domains while maintaining privacy protection.