HALP: A hybrid anonymous login protocol

Abstract

The current research demonstrates the design and implemention of the Hybrid Anonymous Login Protocol (HALP), which attempts to overcome the main shortcomings of existing privacy-preserving authentication systems. Reliance on fixed identifiers in conventional authentication systems implies that the attributes associated with a user’s privacy are exposed to tracking and profiling threats. HALP combines Zero-Knowledge Proofs (ZKPs), pseudonymous identifiers and selective revocation protocols to accomplish unlinkability, scalability, and privacy protection. The ability to log in to the system without revealing identifiable information allows the user to maintain their privacy, while selective revocation provides the ability to prevent compromised credentials from gaining access to services. HALP is designed modularly and conforms to decentralized identity specifications (most notably W3C Verifiable Credentials), enabling its use in privacy-oriented applications such as healthcare, e-voting and decentralized applications (DApps). The framework’s performance and scalability are thoroughly evaluated through benchmarking tests, and security is analyzed in terms of cryptographic properties and security games, through which HALP was found to be effective for deployment in real-life scenarios