Blockchain For Decentralized Identity Management With Biometrics And Access Token

Abstract

This research addresses the critical vulnerabilities inherent in centralized identity management systems, which are
susceptible to single points of failure, data breaches, and profound privacy violations. To mitigate these risks, we propose and detail
the architectural design of a novel, decentralized identity framework that integrates blockchain technology with biometric
authentication and advanced cryptographic principles.
The proposed methodology generates a unique, blockchain-based identity for each user by cryptographically hashing personal data
and biometric templates (fingerprint and facial recognition) using SHA-256. Identity verification for service providers is facilitated
by access tokens issued via smart contracts, which allow for authentication without direct access to sensitive biometric data. The
system enforces secure access by validating tokens against real-time biometric verification, with automatic revocation upon
mismatch.
The framework incorporates a Zero-Knowledge Proof (ZKP) mechanism to enable privacy-preserving verification, allowing users
to authenticate their identity while withholding the underlying data. Decentralized storage of hashed biometric templates is achieved
through integration with the Internet Computer Protocol (ICP), thereby eliminating centralized points of failure. The system's
performance is rigorously evaluated using key metrics, including the False Acceptance Rate (FAR), False Rejection Rate (FRR),
token generation latency, and blockchain transaction throughput.
This work's primary contribution is the development of a resilient, interoperable, and privacy-centric model for digital identity. The
results demonstrate enhanced security and a reduced risk of identity theft, positioning this solution as a secure and scalable
alternative to traditional centralized identity infrastructures.