Blockchain-Based Authentication Systems for Securing E-Commerce Transactions: Design, Prototype Implementation, and Comparative Evaluation

Abstract

Abstract E-commerce platforms are increasingly targeted by sophisticated cyber-attacks that exploit the inherent vulnerabilities of centralised authentication architectures. Password-based systems, two-factor authentication, and centralised identity stores have demonstrated persistent susceptibility to phishing, credential stuffing, man-in-the-middle interception, and large-scale data breaches. This paper investigates the design, implementation, and evaluation of a blockchain-based authentication system as a structural response to these limitations. The proposed system leverages Ethereum’s public-key cryptographic infrastructure, MetaMask wallet integration, Web3.js, JSON Web Tokens (JWT), React.js, and Node.js to deliver a decentralised, tamper-proof, and privacy-preserving authentication flow for e-commerce applications. A proof-of-concept prototype was built and evaluated against conventional authentication methods across eleven analytical dimensions, including security architecture, data integrity, identity management, scalability, trust models, and regulatory alignment. Results confirm that the blockchain-based approach eliminates credential database attack surfaces, enables non-repudiable transaction signing, supports Zero-Knowledge Proof (ZKP) verification, and implements Self-Sovereign Identity (SSI) principles that return data ownership to users. Scalability under high transaction volumes and user onboarding complexity are identified as the primary adoption barriers, suggesting that hybrid architectures may offer the most pragmatic near-term deployment pathway. The study contributes an empirically grounded, real-world implementation perspective to the growing literature on blockchain security applications, and provides actionable guidance for e-commerce operators, security practitioners, and researchers exploring decentralised identity systems. Keywords Blockchain Authentication, E-Commerce Security, Ethereum, Metamask, Decentralised Identity, Zero-Knowledge Proofs, Self-Sovereign Identity, JWT, Smart Contracts, Credential Stuffing, Public-Key Cryptography.