BLOCKCHAIN-BASED IDENTITY MANAGEMENT SYSTEM: COMPREHENSIVE IMPLEMENTATION WITH BIOMETRIC AUTHENTICATION AND VERIFICATION

Shafat-E-Rasool; Aisha Nadeem; Muhammad Fahad Saeed; Engr. Farhan Hassan

Authors

Shafat-E-Rasool
Aisha Nadeem
Muhammad Fahad Saeed
Engr. Farhan Hassan

Abstract

Digital Identity Management is central to online interactions in financial, healthcare, and governmental domains. However, the traditional systems are centralized, suffering from single points of failure, identity theft, and lack of user control. This paper proposes a blockchain-based decentralized identity management framework that utilizes Distributed Ledger Technology for secure, tamper-resistant, and user-controlled verification of digital identity. The proposed system uses Self-Sovereign Identity and Decentralized Identifiers for user-centric identity governance, removing dependence on central authorities. This paper introduces a new implementation of a decentralized identity management system tailored for national identity credentials by using Ethereum smart contracts in combination with integrated facial biometric authentication and behavioral liveness detection.
Our system architecture introduces a three-entity model of Issuer, Holder, and Verifier that enables trusted credential issuance with decentralized verification while storing all PII off-chain. Newness lies in:

Hash-anchored government-level identities with cryptographic commitments in practice.
Integrated facial biometric authentication with liveness detection to prevent spoofing attacks.
Local wallet storage encrypted via PBKDF2-SHA256 key derivation; 200,000 iterations provide 256-bit equivalent security strength.
End-to-end workflow functionality preserving privacy through layered encryption.

The system is deployed and tested on Ethereum Sepolia testnet with formal security analysis of the cryptographic properties. Experimental results validate sub-second credential verification, < 2% false rejection rate for face authentications, and complete protection against presentation attacks using behavioral liveness checks. This architecture enforces role-based access control through smart contract modifiers and demonstrates practical feasibility for government-scale deployment.