Abstract:In the development of web applications, the rapid advancement of Internet technologies has brought unprecedented opportunities and increased the demand for user authentication schemes. Before the emergence of blockchain technology, establishing trust between two unfamiliar entities relied on a trusted third party for identity verification. However, the failure or malicious behavior of such a trusted third party could undermine such authentication schemes (e.g., single points of failure, credential leaks). A secure authorization system is another requirement of user authentication schemes, as users must authorize other entities to act on their behalf in some situations. If the transfer of authentication permissions is not adequately restricted, security risks such as unauthorized transfer of permissions to entities may occur. Some research has proposed blockchain-based decentralized user authentication solutions to address these risks and enhance availability and auditability. However, as we know, most proposed schemes that allow users to transfer authentication permissions to other entities require significant gas consumption when deployed and triggered in smart contracts. To address this issue, we proposed an authentication scheme with transferability solely based on hash functions. By combining one-time passwords with Hashcash, the scheme can limit the number of times permissions can be transferred while ensuring security. Furthermore, due to its reliance solely on hash functions, our proposed authentication scheme has an absolute advantage regarding computational complexity and gas consumption in smart contracts. Additionally, we have deployed smart contracts on the Goerli test network and demonstrated the practicality and efficiency of this authentication scheme.

Two-way Authentication Signature Scheme Based on Self-updating Hash Chains

Hash Function and Smart Card Based Multi-Server Authentication Protocol

Self-Updating One-Time Password Mutual Authentication Protocol for Ad Hoc Network

An Efficient Delegation-Based Anonymous Authentication Protocol

Digital Signature Scheme Based on Multi-Dimensional Hash Chains for Ad-Hoc Wireless Routing Security

An Improved Hash-Based RFID Two-Way Security Authentication Algorithm

A Hash Tree Based Authentication Scheme in SIP Applications

On the Design of Time-Stamped Signatures

Construction and security analysis of hash algorithm based on stream cipher

An Enhanced Two-factor User Authentication Scheme in Wireless Sensor Networks.

An efficient blockchain-based authentication scheme with transferability

Blockchain-based mutual authentication protocol without CA

An efficient dynamic ID based remote user authentication scheme using self-certified public keys for multi-server environment

Password-based Authenticated Key Agreement Scheme with Mutual Anonymity for Trusted Computation

A DYNAMIC PASSWORD AUTHENTICATION FOR REMOTE USERS IN INSECURE CHANNEL

Research of RFID Authentication Protocol Based on Hash Function

Multi-factor authentication scheme based on custom attributes

Revisiting Anonymous Two-Factor Authentication Schemes for Multi-server Environment

Two Birds with One Stone: Two-Factor Authentication with Security Beyond Conventional Bound.

A User Authentication Scheme Based on Elliptic Curves Cryptography for Wireless Ad Hoc Networks

On the Security of Two Identity-Based Signature Schemes Based on Pairings