BLOCKCHAIN-BASED AUTHENTICATION SYSTEM FOR PROTECTING COMPUTER NETWORKS FROM CYBERATTACKS
- Authors
-
-
Turg'unboyeva Adolatxon To'lqinjon qizi
UBS, Master's Program in Computer Networks and Their Software
-
- Keywords:
- blockchain cybersecurity authentication decentralized security system computer networks digital identity cryptography smart contract decentralized identifier DID digital signature information security access control
- Abstract
- Background. Traditional authentication systems in computer networks typically depend on a centralized server or identity management service, which creates a single point of failure and increases the risks of database breaches, credential theft, unauthorized access and other cyberattacks. Methods. This study applies a design-oriented conceptual modelling approach combined with a qualitative threat analysis to develop a blockchain-based decentralized authentication architecture. The model incorporates public and private key pairs, digital signatures, challenge–response (nonce) verification, smart contracts and W3C Decentralized Identifiers (DID). Results. The proposed architecture comprises eight functional components and an eight-step registration and authentication workflow, a role-based access-control scheme implemented through a smart contract, and protection mechanisms against password theft, replay, man-in-the-middle, central-server compromise and administrator-privilege abuse. Conclusion. Integrating blockchain with cryptographic authentication can provide an additional security layer and reduce dependence on centralized infrastructures; however, private key management, scalability, transaction latency, smart contract security and privacy must be addressed before practical deployment.
- References
-
[1] OWASP Foundation, "Authentication cheat sheet," OWASP Cheat Sheet Series. [Online]. Available: https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html (accessed Oct. 5, 2026).
[2] P. A. Grassi et al., "Digital identity guidelines: Authentication and lifecycle management," Nat. Inst. Standards Technol., Gaithersburg, MD, USA, NIST Special Publication 800-63B, 2017, doi: 10.6028/NIST.SP.800-63b.
[3] D. Yaga, P. Mell, N. Roby, and K. Scarfone, "Blockchain technology overview," Nat. Inst. Standards Technol., Gaithersburg, MD, USA, NISTIR 8202, 2018, doi: 10.6028/NIST.IR.8202.
[4] S. Nakamoto, "Bitcoin: A peer-to-peer electronic cash system," 2008. [Online]. Available: https://bitcoin.org/bitcoin.pdf
[5] K. Christidis and M. Devetsikiotis, "Blockchains and smart contracts for the Internet of Things," IEEE Access, vol. 4, pp. 2292–2303, 2016, doi: 10.1109/ACCESS.2016.2566339.
[6] A. Dorri, S. S. Kanhere, R. Jurdak, and P. Gauravaram, "Blockchain for IoT security and privacy: The case study of a smart home," in Proc. IEEE Int. Conf. Pervasive Comput. Commun. Workshops (PerCom Workshops), 2017, pp. 618–623, doi: 10.1109/PERCOMW.2017.7917634.
[7] A. Ouaddah, A. Abou Elkalam, and A. Ait Ouahman, "FairAccess: A new blockchain-based access control framework for the Internet of Things," Secur. Commun. Netw., vol. 9, no. 18, pp. 5943–5964, 2016, doi: 10.1002/sec.1748.
[8] V. C. Hu, "Blockchain for access control systems," Nat. Inst. Standards Technol., Gaithersburg, MD, USA, NIST IR 8403, 2022, doi: 10.6028/NIST.IR.8403.
[9] L. Lesavre, P. Varin, and D. Yaga, "Blockchain networks: Token design and management overview," Nat. Inst. Standards Technol., Gaithersburg, MD, USA, NISTIR 8301, 2021, doi: 10.6028/NIST.IR.8301.
[10] World Wide Web Consortium (W3C), "Decentralized identifiers (DIDs) v1.0," W3C Recommendation, Jul. 2022. [Online]. Available: https://www.w3.org/TR/did-core/
[11] World Wide Web Consortium (W3C), "Decentralized identifiers (DIDs) v1.1," W3C Candidate Recommendation Snapshot, Mar. 2026. [Online]. Available: https://www.w3.org/TR/2026/CR-did-1.1-20260305/
[12] World Wide Web Consortium (W3C), "Verifiable credentials data model v2.1," W3C Working Draft, 2026. [Online]. Available: https://www.w3.org/TR/vc-data-model-2.1/
[13] OWASP Foundation, "Multifactor authentication cheat sheet," OWASP Cheat Sheet Series. [Online]. Available: https://cheatsheetseries.owasp.org/cheatsheets/Multifactor_Authentication_Cheat_Sheet.html (accessed Oct. 5, 2026).
[14] N. Atzei, M. Bartoletti, and T. Cimoli, "A survey of attacks on Ethereum smart contracts (SoK)," in Principles of Security and Trust (Lecture Notes in Computer Science, vol. 10204), M. Maffei and M. Ryan, Eds. Berlin, Germany: Springer, 2017, pp. 164–186, doi: 10.1007/978-3-662-54455-6_8.
[15] D. Yaga and P. Mell, "A security perspective on the Web3 paradigm," Nat. Inst. Standards Technol., Gaithersburg, MD, USA, NIST IR 8475, Feb. 2025, doi: 10.6028/NIST.IR.8475.