Abstract The increasing fragmentation of blockchain networks, compounded by recurring vulnerabilities in conventional cross-chain bridges—including censorship, replay attacks, and validator collusion—underscores an urgent need for secure and privacy-preserving interoperability protocols. This paper introduces ZK-InterChain, a protocol designed for unidirectional data transfers from consortium to public blockchains. The system empowers users to prove private or semi-private actions, such as verified purchases, without revealing their identities on the public network. The core of ZK-InterChain's architecture features a dual Zero-Knowledge Proof (ZKP) system. A client-side module facilitates user-generated proofs of private activity, while a validator-side module attests to state updates from the consortium chain using aggregated BLS signatures. Privacy is maintained through cryptographic nullifiers and minimal public inputs, which decouple a user's identity from their public-chain activities. Security analysis confirms the protocol's resilience against key attack vectors. Empirical evaluation demonstrates user-side proof generation in approximately one minute and validator-side state attestation in two minutes, with on-chain verification consuming approximately 220k gas. These performance characteristics establish ZK-InterChain as a viable solution for non-immediate, privacy-sensitive applications, such as decentralized reputation systems, post-event credentialing, and anonymous feedback mechanisms.
Recent advances in lattice-based cryptography have seen Chen et al. introduce a linkable ring signature scheme (LLRS) for cloud-assisted electronic medical record systems, claiming dual security properties of linkability and unforgeability (IEEE Trans. Inf. Forensics Secur., doi: 10.1109/TIFS.2024.3455772). Our cryptanalysis reveals critical security flaws in their construction: the scheme fails to satisfy either claimed property. Specifically, we demonstrate universal forgeability through adaptive message attacks and identify defective linkability verification that permits signature origin ambiguity. Following vulnerability demonstrations via concrete attack vectors, we trace these weaknesses to flawed parameter initialization and improper nonce handling in their zero-knowledge proof framework. We conclude with concrete mitigation strategies including strengthened commitment schemes and improved randomness management.
The growing demand for verifiable and tamper-resistant academic achievements highlights critical limitations in traditional research credentialing systems, particularly in areas of data integrity, privacy, and traceability. Research proposes a blockchain-based certification and smart contract traceability framework that transforms research outputs such as publications, datasets, and intellectual property into immutable and auditable digital credentials. The system incorporates an encryption architecture known as the Secure Dual-Layer Advanced Triple Cryptographic Shield System (SDL-ATCSS), which combines dual-layer hybrid cryptography with a triple-stage obfuscation mechanism. To ensure data integrity and tamper resistance, the framework utilizes the SHA-256 hashing algorithm, generating cryptographic hashes of each encrypted artifact before committing it to the blockchain. The framework leverages the Ethereum blockchain and smart contracts to manage access control, version tracking, and automated certification workflows. Each research artifact is encrypted using SDL-ATCSS, hashed with SHA-256, and recorded on-chain with a timestamp and a digital signature. A randomized threshold voting protocol, supported by off-chain verification scripts, enables decentralized validation of each certification request and enforces integrity through deposit-based incentive and penalty mechanisms. A case study on academic publication certification demonstrates the practical application of the system. Research simulates the lifecycle of a research article from submission to peer review and publication, with each stage immutably recorded and verified on the blockchain. Results show that the system maintains low certification latency, strong Hash Verification, validator participation rate, tamper detection rate, lifecycle coverage, and high IPFS Pointer Validity, all of which are above 97%. Research establishes a secure, scalable, and decentralized framework for the transformation of research achievements into verifiable digital credentials, offering a transparent alternative to traditional academic validation systems.
Cross-chain interoperability is essential for the next generation of decentralized finance applications, yet existing bridges suffer from security weaknesses, high latency, and fragmented trust models. This paper introduces SnapBridge, a protocol that transfers assets across heterogeneous blockchains using cryptographic state snapshots combined with optimistic verification. A snapshot aggregator collects Merkleized proofs of account states and transaction histories from the source chain. Instead of verifying all proofs on-chain, SnapBridge relies on optimistic execution: transfers proceed immediately but can be challenged within a fraud-proof window. Fraud detection is performed by light clients using succinct verification rules. We implement SnapBridge across Ethereum, Polygon, and Avalanche testnets and benchmark transfer throughput, failure handling, and gas consumption. Results show up to 3× improvement in transfer latency and a 40% reduction in on-chain verification cost compared to multisig-based bridges. The paper evaluates adversarial scenarios such as corrupted aggregators, delayed snapshots, and chain reorgs. SnapBridge provides a modular, safer alternative for cross-chain liquidity flows.
Fernando Castillo, Eduardo Brito, Sebastian Werner, Pille Pullonen · 5 authors
Service Level Agreement (SLA) monitoring in service-oriented environments suffers from inherent trust conflicts when providers self-report metrics, creating incentives to underreport violations. We introduce a framework for generating verifiable SLA violation claims through trusted hardware monitors and zero-knowledge proofs, establishing cryptographic foundations for genuine trustworthiness in service ecosystems. Our approach starts with machine-readable SLA clauses converted into verifiable predicates and monitored within Trusted Execution Environments. These monitors collect timestamped telemetry, organize measurements into Merkle trees, and produce signed attestations. Zero-knowledge proofs aggregate Service-Level Indicators to evaluate compliance, generating cryptographic proofs verifiable by stakeholders, arbitrators, or insurers in disputes, without accessing underlying data. This ensures three security properties: integrity, authenticity, and validity. Our prototype demonstrates linear scaling up to over 1 million events per hour for measurements with near constant-time proof generation and verification for single violation claims, enabling trustless SLA enforcement through cryptographic guarantees for automated compliance verification in service monitoring.
R. Raja Sekar, Bhavesh Shankar Kalluru, Imran Sunkesula, Gopi Krishna Chimata · 5 authors
Blockchain mechanism, having its distributed and immutable nature, has become a revolutionary method of secure and transparent data exchange. With this potential in mind, our proposal is for Secure File Sharing System that combines AES-256&DES encryption with Ethereum smart contracts to provide a privacy-oriented and audit-ready file sharing system. The conventional centralized approach is prone to data leakages and unauthenticated access, but with the use of blockchain and encryption, this approach provides confidentiality along with trustless verification. Files are first encrypted at the server level using AES, DES symmetric encryption, thus avoiding any plaintext exposure at the server level. The file is stored encrypted within a cloud storage service called cloudinary, with sensitive metadata such as hashed file ID, destination wallet address, and unlock timestamp stored on the Ethereum blockchain through smart contracts. The blockchain layer delivers traceability and immutability with accessed file records being tamperproof. In addition, there is a time-lock mechanism in the smart contract that doesn't allow recipients to access files before the unlock time, thereby improving security and governance. The React.js frontend communicates with blockchain networks using MetaMask and ethers.js, while the Node.js and Express backend encrypts and decrypts the files, and stores metadata in MongoDB. This two-way hybrid approach effectively addresses attacks such as unauthorized access, man-in-the-middle, and data tampering. With this blend of blockchain's decentralized trust and AES's and DES's secrecy, this project lays out an innovative and viable model for secure file sharing digitally. It is robust in possible application to actual applications like enterprise document management, transfer of legal documents, and confidential communication, and provides a secure, transparent, and scalable solution.
Sabri Barbaria, Abderrazak Jemai, Halil İbrahim Ceylan, Raul Ioan Muntean · 6 authors
Background: Healthcare data interoperability faces significant barriers, including regulatory compliance complexities, institutional trust deficits, and technical integration challenges. Current centralized architectures demonstrate inadequate mechanisms for balancing data accessibility requirements with patient privacy protection, as mandated by HIPAA and GDPR frameworks. Traditional compliance approaches rely on manual policy implementation and periodic auditing, which are insufficient for dynamic, multi-organizational healthcare data-sharing scenarios. Objective: This study develops and proposes a blockchain-based healthcare data management framework that leverages Hyperledger Fabric, IPFS, and the HL7 FHIR standard and incorporates automated regulatory compliance mechanisms via smart contract implementation to meet HIPAA and GDPR requirements. It assesses the theoretical system architecture, security characteristics, and scalability considerations. Methods: We developed a permissioned blockchain architecture that employs smart contracts for privacy policy enforcement and for patient consent management. The proposed system incorporates multiple certification authorities for patients, hospitals, and research facilities. Architectural evaluation uses theoretical modeling and system design analysis to assess a system’s security, compliance, and scalability. Results: The proposed framework demonstrated enhanced security through decentralized control mechanisms and cryptographic protection protocols. Smart contract-based compliance verification can automate routine regulatory tasks while maintaining human oversight in complex scenarios. The architecture supports multi-organizational collaboration with attribute-based access control and comprehensive audit-trail capabilities. Conclusions: Blockchain-based healthcare data-sharing systems provide enhanced security and decentralized control compared with traditional architectures. The proposed framework offers a promising solution for automating regulatory compliance. However, implementation considerations—including organizational readiness, technical complexity, and scalability requirements—must be addressed for practical deployment in healthcare settings.
The integration of blockchain technology into healthcare presents a paradigm shift for secure data management, enabling decentralized and tamper-proof storage and sharing of sensitive Electronic Health Records (EHRs). However, existing blockchain-based healthcare systems, while providing robust access control, commonly overlook the high latency in user-side re-computation of hashes for integrity verification of large multimedia data, impairing their practicality, especially in time-sensitive clinical scenarios. In this paper, we propose FAITH, an innovative scheme for \underline{F}ast \underline{A}uthenticated and \underline{I}nteroperable mul\underline{T}imedia \underline{H}ealthcare data storage and sharing over hybrid-storage blockchains. Rather than user-side hash re-computations, FAITH lets an off-chain storage provider generate verifiable proofs using recursive Zero-Knowledge Proofs (ZKPs), while the user only needs to perform lightweight verification. For flexible access authorization, we leverage Proxy Re-Encryption (PRE) and enable the provider to conduct ciphertext re-encryption, in which the re-encryption correctness can be verified via ZKPs against the malicious provider. All metadata and proofs are recorded on-chain for public verification. We provide a comprehensive analysis of FAITH's security regarding data privacy and integrity. We implemented a prototype of FAITH, and extensive experiments demonstrated its practicality for time-critical healthcare applications, dramatically reducing user-side verification latency by up to $98\%$, bringing it from $4$ s down to around $70$ ms for a $5$ GB encrypted file.
Octara Pribadi, Johanes Terang Kita Perangin Angin, Erick Erick
The development of information technology has driven the need for stronger security systems and guaranteed privacy on web-based platforms. Traditional verification methods such as passwords and two-factor authentication are increasingly seen as insufficient in facing the growing complexity of cyber threats. Zero-Knowledge Proof (ZKP) emerges as an alternative solution that enables identity verification without revealing sensitive information. This research aims to implement ZKP technology in web-based systems to enhance user security and privacy. The method involves the implementation of a simple XOR-based ZKP algorithm to prove identity without disclosing personal data, as well as a three-step verification mechanism between the verifier and the prover. Implementation results show that the system can prevent attacks such as man-in-the-middle and replay attacks, while maintaining data confidentiality during the authentication process. This study also identifies challenges in system efficiency and verification process integrity and offers technical solutions to support broader ZKP integration in digital platforms. Thus, the use of ZKP in web-based systems holds great potential to improve user trust and security in the digital era.
Jongho Seol, J. Deuja, Indy Park, Cong Pu · 5 authors
This paper presents a new quantitative model to study the interplay across CIA (Confidentiality, Integrity, Availability) Triad and performance in blockchain-based crypto space with specific reference to Ethereum or Ethereum-equivalent chains. The model introduces and incorporates three new random variables on top of the baseline chain model [16], C: the likelihood to secure confidentiality; $\boldsymbol{I}$: to secure integrity; and $\boldsymbol{A}$: to secure availability. Thus, the model will orchestrate an extensive set of key random variables such as λ: transaction slot arrival rate; μ: block posting rate; $\boldsymbol{i}$: number of transaction slots pending on the current block along with $\boldsymbol{C}, \boldsymbol{I}$ and $\boldsymbol{A}$. The underlying mathematical method employed is an embedded Markovian queueing model as the model traces the stochastic flow of the transactions as well as the Markovian flow of them with respect to $\boldsymbol{C}, \boldsymbol{I}$ and $\boldsymbol{A}$. The state in the model is defined by $P_{i_{C / I / A}}$, i.e., the likelihood to have i number of transaction slots pending on the current block and the stochastic CIA status of the crypto space thus far is in C or $\bar{C}, I$ or $\overline{\boldsymbol{I}}$, and $\boldsymbol{A}$ or $\overline{\boldsymbol{A}}$. The solutions to the model will be provided to assess a few basic performance metrics such as W: the average transaction waiting time, $L:$ the average block capacity required; and G: the throughput of transactions per block. And further and primarily, a unique and extensive simulation and analysis will be conducted to evaluate the impact of base random variables such as i, λ, μ, and various combinations of $\mathcal{C}, I$ and A on the overall $P_{i_{C / I / A}}$ in steady state. The results of the simulation reveal tradeoffs between the CIA Triad and performance that is uniquely identifiable by the proposed model.
Raaj Anand Mishra, Preeti Bhaskar, M. Hafijul Islam Khan
Purpose Universities worldwide face significant challenges in maintaining administrative data, including security flaws, delays in verification processes and a lack of confidence among those involved. The purpose of this paper is to design an integrated blockchain-based decentralized application architecture for the University of Technology and Applied Sciences (UTAS) in Oman, aligning with Vision 2040’s sustainability goals. Design/methodology/approach The solution uses a hybrid architecture that combines the benefits of the public blockchain with governance at the consortium level appropriate for educational organizations. The user interface layer has role-based dashboards for various stakeholder groups, ensuring proper access control and user experience improvement. The application layer integrates Web3 using the Next.js framework, allowing for seamless interaction between standard Web interfaces and blockchain capabilities. The smart contract layer is made up of eight specialized contracts that handle various administrative responsibilities, each designed with a modular architecture to provide maintainability and upgradeability. The blockchain layer makes use of Ethereum’s proven infrastructure and proof-of-stake consensus, which is dispersed across UTAS’s 13 campuses to ensure decentralization and fault tolerance. Findings This study broadens the architecture by leveraging well-established blockchain frameworks for credential management to include a wide range of educational administrative tasks such as admissions, certifications, alumni management, library services, on-the-job training, examinations and placements across UTAS’s 13 campuses located in 11 governorates. The suggested system makes use of the Ethereum blockchain platform with smart contracts, as well as the InterPlanetary File System for distributed document storage, to ensure immutability, transparency and cost-effective administrative operations. The architecture consists of eight core smart contracts that regulate various administrative duties, five types of stakeholders and a uniform dashboard system that allows seamless data transmission and verification across campuses. Practical implications Key contributions include a practical implementation framework with phased deployment methods, a complete stakeholder governance model and quantitative benefits showing a reduction in processing times and operational cost savings. The architecture’s modular nature allows it to adapt to changing educational requirements while remaining compatible with new technologies such as artificial intelligence and the Internet of Things. Originality/value This research addresses the present limitations of traditional educational administration systems and establishes a framework for the further deployment of blockchain technology in Oman’s higher education sector.
Namrata Mishra, P. K. Chidambaram, Hassan Mohamed Mahdi, Arumalla Spandana · 7 authors
SSI is a quickly appearing paradigm to secure and user-sovereign digital identity management. Nevertheless, existing implementations of SSI still have privacyprotection, interoperability, anti-fraud, and anti-cryptographic resiliency weaknesses. To tackle these issues, this paper presents a proposal of an AI-enhanced, blockchain-based protocol incorporating the use of Zero Knowledge Proofs (ZKP), Multiple Layer Decentralization (MLD) as well as quantumresistant cryptography. The framework uses AI to do dynamic Identity verification and real-time fraud detection, risk-based authentication and provides great advantage to traditional SSI models. The system proposed will utilize ZKPs to provide its users with privacy-preserving authentication so that one can confirm attributes but not reveal sensitive personal data. Multi-layer decentralized identity validation structure is developed to enhance the level of trust, reduce dependence on centralized authorities and enhances/supported interoperability across homogeneous systems. Ancillary, postquantum cryptographic schemes will also be incorporated to protect identities by mitigating the possible quantum computing attacks. Experimental evidence shows that our framework significantly enhances the accuracy of verification, the authentication latency and increases security in comparison to centralised and federated identity management solutions. The scheme is very flexible in financing sector, cross boundaries identity, e-governance portals and Web3 online portals. In the end, this study leads to an increment of a scaleable and privacy-sensitive digital identity system because it bridges existing security, usability and compliance gaps and opens pathways to robust and resilient SSI implementations into the future.
Feng Wang, Shuo Yang, Min Zhang, Yang Liu · 6 authors
In decentralized ecosystems, Decentralized Identifiers (DID) and Verifiable Credentials (VC) enable self-sovereign identity, cross-domain interoperability, and privacy-preserving data exchange. However, current VC models face critical limitations, including static attribute binding, inefficient updates, high on-chain verification costs, and privacy leakage. To address these issues, this paper proposes a Dynamic Attribute-oriented Verifiable Credential (DAVC) model, designed to support flexible attribute lifecycle management. The model adopts a three-layer architecture that combines minimal on-chain anchoring, off-chain attribute decoupling, and hierarchical recursive verification to enable efficient and scalable identity verification. First, the onchain layer introduces Sparse Merkle Tree (SMT) root hashes to reduce the need for recording off-chain attribute statuses. Second, the off-chain layer achieves semantic isolation between attributes and identities through an Anonymous Attribute Identifier (AID) mechanism, while improving update efficiency via path caching and incremental strategies. Finally, a Hierarchical Recursive Zero-Knowledge Proof (HR-ZKP) mechanism, based on the Halo2 framework, achieves logarithmic complexity in multiattribute proof generation, supporting attribute-level minimal disclosure and structural anonymization. Experimental results demonstrate that DAVC maintains constant on-chain storage, significantly reduces gas consumption, keeps proof sizes within reasonable limits (e.g., 2.9KB for 10 attributes), and achieves proof generation delays within hundreds of milliseconds. Overall system performance exhibits logarithmic growth as the number of attributes increases. The DAVC model achieves a balance between strong privacy protection, high composability, and dynamic identity expression through minimal on-chain data usage and closed verification paths. This provides a valuable reference for composable identity authentication in Web3 scenarios.
This paper focuses on the research of auditing data privacy protection mechanism under blockchain technology and constructs an efficient computational model. The model is based on the distributed ledger characteristic of blockchain, and ensures the data tampering and traceability by optimizing the consensus mechanism. In the proposed model, the consensus mechanism is optimized by utilizing the tamper proof properties of blockchain. By building a multi node collaborative framework that supports batch auditing, this model improves data synchronization efficiency. The focus of optimization is to reduce the consensus reaching time and thus improve the overall performance and scalability of the blockchain network. At the same time, smart contracts are utilized to realize automated data sharing and auditing processes to improve auditing efficiency. In terms of data encryption algorithm design, a chaotic system based on RSA algorithm encryption is designed by combining the randomness and complexity of chaos theory to further strengthen the security of data. The results show that the model in this paper can make the ciphertext image uncorrelated in all directions and improve the encryption strength of the image. The method of this paper can make the audit data information on the degree of privacy protection and the complexity of the ciphertext image increase up to about 50% and 45% than the comparison method; the encryption and decryption time of the data is reduced by about 20 s. In addition, the running time of the stages of this paper’s algorithm increases with the increase in the number of concurrent requests and this paper’s system can support concurrency of 500 users at the same time and make its throughput up to 583.49/s.
Bitcoin is one of the famous cryptocurrencies in the world. It is a permissionless blockchain, and all transactions are stored in a public decentralized ledger. In its security design, Bitcoin utilizes various cryptographic primitives, such as hash functions and signature schemes. In the current version of Bitcoin, the Elliptic Curve Digital Signature Algorithm (ECDSA) is employed, which is not considered post-quantum secure due to the Shor's algorithm. Since December 2016, the National Institute of Standards and Technology (NIST) initiated a process to standardize certain post-quantum cryptographic primitives, including key encapsulation mechanisms (KEMs), public key encryption (PKE), and digital signature schemes. Dilithium, a lattice-based digital signature scheme, emerged as one of the winners of this competition and is recently standardized as ML-DSA (FIPS 204). In this work, we analyze the potential replacement of the ECDSA signature, the current signature in Bitcoin, with Dilithium, which is a post-quantum digital signature. This replacement will have a significant impact on many protocols within the Bitcoin ecosystem. The ECDSA algorithms are not only utilized for transaction signing and verification but also in wallet management. Bitcoin operates on a pseudonymous system rather than complete anonymity. To enhance privacy protection, the Bitcoin community has adopted a special type of (hierarchical) deterministic wallet as outlined in Bitcoin Improvement Proposal 32 (BIP32). We have constructed deterministic wallets by first designing DilithiumRK, a signature scheme with rerandomizable keys from Dilithium. Subsequently, we conducted a thorough security analysis and successful implementation of DilithiumRK.
Chung, Siu Kei, Francisco Carpio, Andrei Navoichyk, Siarhei Valasovich · 11 authors
The internet faces a sovereignty crisis due to power concentration and data growth among a few hyperscalers, leading to centralization and loss of user control. This consolidation risks censorship and creates single points of failure. While Web3 offers decentralized solutions, they often sacrifice either scalability, decentralization, or security, which are key elements in the blockchain trilemma. These solutions also struggle with limited access to enterprise-grade hardware and frequently rely on centralized infrastructure. The Impossible Cloud Network (ICN) addresses these issues by creating a multi-tiered, decentralized infrastructure layer. ICN offers a composable service layer, an enterprise-grade hardware resource layer, and a transparent, permissionless HyperNode network for performance enforcement. By strategically decoupling and decentralizing each layer, ICN aims to provide an open, extensively scalable infrastructure that ensures digital sovereignty, eliminates single points of trust, enables service programmability, and offers a decoupled architecture for limitless possibilities in the future internet.
Dong‐Seong Kim, Esmot Ara Tuli, Igboanusi Ikechi Saviour, Md Mehedi Hasan Somrat · 5 authors
Technological advancements have fostered ubiquitous connectivity, driving the adoption of cloud computing and cloud-based services and applications for maintenance and management purposes. Consequently, cloud computing and cloud-based services have gained popularity for their scalability and efficiency in maintenance and management. However, such interconnected systems are inherently vulnerable to cybersecurity threats, including unauthorized access, data breaches, and others. Blockchain technology, initially popularized through cryptocurrencies, has proven to be a robust and reliable solution for various applications beyond financial transactions, such as supply chain management and secure data sharing. The integration of blockchain with cloud computing has given rise to the concept of “Blockchain as a Service” (BaaS), which provides developers with scalable and ready-to-use blockchain frameworks without the need for backend management. The current blockchain network has limitations such as low transaction per second (TPS), prolonged mining times, and other challenges that make it difficult for certain service-oriented applications. To address these issues, this paper introduces a hybrid on-off chain, edge-enabled BaaS solution called Pure Chain for service computing. Pure Chain refines the consensus algorithm, enhances the mining process, and enables seamless edge-supported online-offline hybrid transactions. Moreover, modified blockchain layers to improve efficiency and scalability. Pure Chain facilitates blockchain-enabled services and smart contract deployment in a cloud computing environment. Pure Chain optimizes energy consumption and delivers transaction speeds that are 12 times faster than conventional blockchain networks.
Current systems for exchanging medical records struggle with efficiency and privacy issues. While establishing the Electronic Medical Record Exchange Center (EEC) in 2012 was intended to alleviate these issues, its centralized structure has brought about new attack vectors, such as performance bottlenecks, single points of failure, and an absence of patient consent over their data. Methods: This paper describes a novel EMR Gateway system that uses blockchain technology to exchange electronic medical records electronically, overcome the limitations of current centralized systems for sharing EMR, and leverage decentralization to enhance resilience, data privacy, and patient autonomy. Our proposed system is built on two interconnected blockchains: a Decentralized Identity Blockchain (DID-Chain) based on Ethereum for managing user identities via smart contracts, and an Electronic Medical Record Blockchain (EMR-Chain) implemented on Hyperledger Fabric to handle medical record indexes and fine-grained access control. To address the dual requirements of cross-platform data exchange and patient privacy, the system was developed based on the Fast Healthcare Interoperability Resources (FHIR) standard, incorporating stringent de-identification protocols. Our system is built using the FHIR standard. Think of it as a common language that lets different healthcare systems talk to each other without confusion. Plus, we are very serious about patient privacy and remove all personal details from the data to keep it confidential. When we tested its performance, the system handled things well. It can take in about 40 transactions every second and pull out data faster, at around 49 per second. To give you some perspective, this is far more than what the average hospital in Taiwan dealt with back in 2018. This shows our system is very solid and more than ready to handle even bigger workloads in the future.
Umna Iftikhar, Hafiz Muhammad Attaullah, Inam Ullah Khan, Muhammad Mansoor Alam · 6 authors
Verification of a qualification, achievement, quality, or aspect of a person’s background is one of the biggest problems nowadays as we have seen many platforms where students can get fake credentials. Every organization must select professional and academically qualified employees to give quality service. As a result, corporations rely on academic certifications to confirm and measure their prospective employees’ academic qualifications. On the other hand, these employers lack a standardized process for confirming the legitimacy of academic certificates or degrees. Because the present procedures for verifying educational certifications are time-consuming, exhausting, and costly, just a few employers verify certificates for prospective employees. This research examines the issues that are related to the smart verification of someone’s credentials. To make the process of verifying digital credentials quicker, simpler, and more cost-effective, we suggest decentralized architecture. We present the prototype, design, and implementation of the proposed framework.