Abstract:Blockchain technology is widely used in the field of digital currency because of its non-tamperability, traceability, and decentralization. Blockchain's private key is usually used to prove the ownership of the cryptocurrency. However, this private key managed by the blockchain wallet faces the challenge of secure storage. Once the private key is leaked or stolen, the user's digital assets will be permanently lost. To solve the storage issue of the private key, we propose a novel approach based on facial biometrics and a physical unclonable function (PUF) device to generate a secure blockchain's private key. Firstly, to protect user anonymity and enhance the security of the private key, a user's facial biometrics is bound with a device's PUF fingerprint to generate the trusted private keys online without being stored in a third-party server or an external device. Secondly, to prevent the leakage of sensitive data, we utilize the correctness and perfectness of secret sharing to protect the helper data to prevent attackers from obtaining sensitive information about the fusion template. Thirdly, we give the formal security proof of our proposed scheme and conduct the informal security analysis. The experiment results demonstrate our scheme achieves a better EER (Equal Error Rate) of 2.02% in terms of accuracy and takes about 1008ms to generate a private key in terms of efficiency. Moreover, our scheme can resist various attacks such as password guessing , stolen mobile device, user impersonation, physical and cloning, and information leakage attacks. Finally, we develop a blockchain wallet prototype without modifying the blockchain protocol to achieve transfer transactions for demonstrating the usability and security of our proposed approach in a real-world scenario.

Innovative Countermeasures to Defeat Cyber Attacks Against Blockchain Wallets: A Crypto Terminal Use Case

Securing Guarantee of the Blockchain Network: Attacks and Countermeasures

Blockchain Multi-signature Wallet System Based on QR Code Communication

Detecting brute-force attacks on cryptocurrency wallets

SoK: Design, Vulnerabilities, and Security Measures of Cryptocurrency Wallets

WiP: Towards a Secure SECP256K1 for Crypto Wallets: Hardware Architecture and Implementation

Reinforcing Security and Usability of Crypto-Wallet with Post-Quantum Cryptography and Zero-Knowledge Proof

Uncontrolled Randomness in Blockchains: Covert Bulletin Board for Illicit Activity

A Trustenclave-Based Architecture for Ensuring Run-Time Security in Embedded Terminals

Poster: Towards Fully Distributed User Authentication with Blockchain.

Towards a Supply Chain Management System for Counterfeit Mitigation using Blockchain and PUF

A novel blockchain's private key generation mechanism based on facial biometrics and physical unclonable function

Template for Preparation of Manuscripts for Tsinghua Science and Technology

A Security Analysis of Cryptocurrency Wallets against Password Brute-Force Attacks

SmartOTPs: An Air-Gapped 2-Factor Authentication for Smart-Contract Wallets (Extended Version)

From Social Engineering to Quantum Threats: Safeguarding User Wallets with FailSafe

Beware of Pickpockets: A Practical Attack against Blocking Cards

A Blockchain-Based Authentication Mechanism for Enhanced Security

Private and consortium blockchain-based authentication protocol for IoT devices using PUF

Private key encryption and recovery in blockchain

Architecture of Smart Certificates for Web3 Applications Against Cyberthreats in Financial Industry