Decentralized Authentication Scheme Incorporating Reputation and Attribute Signature for Cross-Web3 Applications

Driven by Web 3.0, the number of decentralized applications (DAPPs) continues to increase, and the need for decentralized authentication across applications becomes more and more significant. In addition, multidimensional reputation assessment becomes especially critical in a decentralized environment. However, there is still a lack of trusted and flexible self-sovereign identity (SSI) authentication mechanisms in Web 3.0 decentralized zero-trust cross-applications access scenarios. In response to these challenges, we propose a decentralized authentication scheme that fuses reputation assessment and attribute signature for the open and self-organized Web3 application. First, we design an attribute signature method based on the attributes in a user’s verifiable credentials (VCs). The signature can be used for authentication across Web3 applications, and the authenticator can flexibly adjust the attributes to be verified and their number according to specific needs. Meanwhile, in the attribute signature, we construct a multidimensional reputation assessment mechanism to comprehensively assess the user’s reputation from multiple aspects to determine his/her security risk level, so as to reduce the possibility of identity fraud. Ultimately, through comparative analysis, we verify the advantages of the scheme in terms of privacy, scalability and attack resistance. Moreover, we analyze the performance of the key algorithms in the scheme through simulation experiments, and the experimental results show that our scheme is feasible.