A Blockchain-Based Authentication Method with One-Time Password

Trust mechanisms based on trusted authorities are used to establish trust between two unfamiliar entities in conventional authentication, which cannot meet the higher security requirements of emerging technologies for authentication. Blockchain achieves a decentralized trust mechanism between a group of mutually distrusted nodes without a trusted authority by means of data encryption, timestamp and consensus mechanisms. In this work, we therefore propose an innovative blockchain-based authentication method with one-time password (OTP). Specifically, we propose an OTP scheme and apply it to the blockchain, where blockchain serves as an OTP verifier. We then develop a list of security criteria to analyze the security of the proposed authentication protocol. This paper shows that our scheme can resist replay attacks, brute force attacks, OTP forgery attacks and so on. We finally compare the proposed OTP scheme with the representative OTP schemes according to the designed evaluation criteria and conduct a series of comparative experiments on Hyperledger Fabric. The results show that the proposed scheme is superior in terms of performance and security.