zkPass: A decentralized social identity infrastructure based on MPC and ZKP
zkPass is not just an authentication tool; it is the infrastructure for a decentralized society.Author: Kimming, cointime
With the development of Web3, we are witnessing the rise of a decentralized society. In this society, everyone has complete control over their private data and can interact with the Web3 ecosystem in a secure, efficient, and trustworthy manner. To achieve this vision, we reintroduce zkPass, a composable and privacy-preserving identity protocol based on Multi-Party Computation (MPC) and Zero-Knowledge Proofs (ZKP).
Project Overview
zkPass is a privacy-preserving protocol for private data verification, based on MPC, ZKP, and three-party TLS. zkPass enables users to selectively prove their verifiable data in Web2 and Web3 to third parties through zkSBTs, including legal identity, financial data, medical records, social data, work experience, educational credentials, and skills, without uploading documents or disclosing any personal privacy details. Notably, zkPass stood out among over 900 projects, winning first place in Binance Labs' buildtheblock and receiving investment from Binance.
How It Works
The zkPass protocol operates based on two key technologies: MPC-TLS and ZKP. MPC (Multi-Party Computation) allows multiple participants to jointly compute without compromising their privacy, revealing the results to one or all participants. ZKP (Zero-Knowledge Proof) enables the prover to convince the verifier that a statement is true without disclosing any sensitive information to the verifier.
Key Technologies ------ MPC-TLS & ZKP
- TLS: The Transport Layer Security protocol provides confidentiality and data integrity between two communicating entities. TLS is the cornerstone of communication in the online world.
- MPC (Multi-Party Computation) allows multiple participants to jointly compute without compromising their privacy, revealing the results to one or all participants. This is primarily accomplished using Yao's Garbled Circuits protocol and Oblivious Transfer protocol. Additionally, zkPass is leveraging the latest research papers to optimize the efficiency of MPC, such as "Half Gate," "Silent OT," and "Vector-OLE."
- ZKP (Zero-Knowledge Proof) allows the prover to convince the verifier that a statement is true without revealing any sensitive information to the verifier. Its specific implementation is based on zk-SNARK. zkPass is currently optimizing ZK into interactive zero-knowledge to make it efficient, meaning that ZKP can be generated in just a few seconds.
User Flow
Users (provers) no longer need to upload documents or share private information with third parties. Users can locally generate zero-knowledge proofs by accessing various trusted data sources (e.g., MyGovID in Australia or Singpass in Singapore) and return responses to on-chain smart contracts. In this process, the MPC nodes of the zkPass protocol obtain a mac_key share to ensure the integrity, authenticity, and validity of the data.
Key Features
zkPass has the following key features:
- Privacy Protection: zkPass uses zero-knowledge proofs, allowing users to share their data without disclosing sensitive information.
- Verifiable: zkPass utilizes verifiable zkSBTs to ensure that the data is tamper-proof and verifiable.
- Compatibility: zkPass is compatible with a wide range of data sources from Web2 and Web3 applications, making integration with existing systems easy.
- Anti-Cheat: zkPass employs advanced anti-cheat mechanisms to prevent fraud and abuse.
Use Cases
The versatility of zkPass makes it suitable for a wide range of industries. It is compatible with all data sources of Web2 HTTPS websites and Web3 applications, allowing seamless integration with existing systems without any changes on the data source side. Potential use cases for zkPass include, but are not limited to: zkKYC, healthcare, education, decentralized due diligence, social networks, gaming, finance, and supply chain management.
Online Identity Verification: With zkPass, users can easily verify their identity online without disclosing personal information, helping to prevent identity theft and protect privacy.
Social Applications: With zkPass, users can anonymously prove their age, personal information, and the authenticity of their profiles without disclosing sensitive personal data.
Decentralized Finance: zkPass can be used to verify identities and credentials in DeFi applications, ensuring that only authorized parties can access sensitive financial data.
Job Applications: zkPass can verify job seekers' qualifications, education, and experience without disclosing personal information.
Online Marketplaces: zkPass can be used to verify the authenticity of sellers and buyers or publishers and applicants in online marketplaces, preventing fraud and abuse.
Conclusion
Imagine a world where your personal information no longer needs to pass through numerous data brokers or third parties, but is in your own hands. A world that respects privacy, with data that is secure, authentic, and verifiable. This is the world that zkPass is creating.
zkPass is not just an identity verification tool; it is the infrastructure for a decentralized society. By leveraging MPC and ZKP technologies, zkPass enables users to selectively share their verifiable data with third parties without disclosing sensitive information. Companies and individuals can verify identities and credentials without revealing personal data.
The versatility and compatibility of zkPass make it a valuable tool across a wide range of industries. From financial institutions to healthcare providers, zkPass can be used for secure, privacy-preserving identity verification. Moreover, with its advanced anti-cheat mechanisms, zkPass ensures that the data is tamper-proof and free from fraud.
The future is decentralized, and zkPass is leading the way. With its privacy-preserving technology and secure verification methods, zkPass is creating a world where individuals control their own data and privacy is respected.
