Hybrid Access Control: Integrating Web2 Authentication with Blockchain Transparency

Abstract

This paper proposes a hybrid access control system that integrates the usability of Web2 authentication (Google Login) with the transparency and integrity of Web3 technologies (blockchain and smart contracts). The system enables users to authenticate via their existing Google accounts without managing crypto wallets or private keys, while access permissions are securely recorded on-chain through smart contracts. To ensure cryptographic key security without relying on a centralized authority, the design incorporates Distributed Key Management (DKM). This approach addresses the challenge of balancing usability with verifiability in data access control. By embedding decentralized guarantees within a centralized web service interface, the system enables practical and transparent access control. The proposed architecture demonstrates the potential for a general-purpose, auditable module that facilitates user-consented data sharing with third parties.