Decentralized Identity and Password Authentication System based on Block Chain

Abstract

The most widely used user authentication method on the Internet is abstract password authentication, That is to say, the user and his name - password to each server established, and then use it to authenticate. Although they are widely used because of their simple operation and high experience, the security of authentication provided by them is not high, and the server operator is positioned as a trusted party who can fully control the user’s identity. To solve this problem, many identity recognition systems adopt the concepts of public key encryption and decentralization,but the requirement that users generate and manage public and private key pairs, and that users often do not have such expertise, has become a key factor in the failure of PKI for many end users. To sum up, this paper proposes a decentralized identity and password authentication system (DIA) based on block chain as an identity and authentication framework. Users can register their own user name password pairs and use them as general credentials. The system provides a global name space, meaningful user names, and the ability to resist user name conflict attacks. User’s identity to any server can be applied to authenticate a user, to the server without having to disclose any information relating to the password,, so it is impossible to carry out offline dictionary attack on the password.