Poster: Privacy-Preserving Compliance Checks on Ethereum via Selective Disclosure
This paper proposes a privacy-preserving Selective Disclosure Framework on Ethereum that utilizes client-side zk-SNARKs to enable users to verify specific eligibility criteria, such as age, without revealing sensitive personal data, achieving strict compliance with negligible latency.
Original paper licensed under CC BY 4.0 (http://creativecommons.org/licenses/by/4.0/). This is an AI-generated explanation of the paper below. It is not written or endorsed by the authors. For technical accuracy, refer to the original paper. Read full disclaimer
🕵️♂️ The Problem: The "Glass House" Dilemma
Imagine you live in a Glass House (the Blockchain). Everyone can see inside your house, and once you put something on the table, it can never be erased. This is great for trust because no one can cheat, but it's terrible for privacy.
Currently, if you want to enter a club (a regulated app) that requires you to be over 18, the bouncer (the app) usually asks you to hand over your entire passport. They see your name, your address, your photo, and your birthdate. Even if they only care about your age, they now have your whole identity stored in their database.
- The Risk: If the bouncer gets hacked, your whole identity is stolen.
- The Blockchain Twist: If you put your passport on the Glass House wall, everyone in the world can see it forever. Even if you delete it from the bouncer's computer, it's still visible on the wall.
🎭 The Solution: The "Magic Envelope" (Selective Disclosure)
This paper proposes a new way to enter the club. Instead of handing over your whole passport, you use a Magic Envelope (Zero-Knowledge Proofs).
Here is how it works in everyday terms:
- You keep your secrets safe: Your passport stays locked in your own pocket (your phone/browser). It never leaves your possession.
- The Magic Trick: You put your passport inside a special machine (the ZK Prover) that generates a Magic Receipt.
- The Proof: The receipt says, "I have verified this person is over 18," but it does not show the photo, the name, or the address. It's like a stamp that says "Adult" without showing the ID card.
- The Result: The bouncer checks the receipt, sees the "Adult" stamp, and lets you in. They never saw your face, and no one else on the Glass House wall knows who you are.
🏗️ How the System Works (The Three-Step Dance)
The authors built a system called ZK-Compliance that acts like a digital bouncer with three specific moves:
1. Grant (The Handshake)
- What happens: You want to use an app. The app asks, "Are you over 18?"
- The Magic: Your phone does the math instantly (in less than 200 milliseconds—faster than a blink!). It creates that Magic Receipt and sends it to the blockchain.
- The Record: The blockchain doesn't store your ID; it just stores a note saying, "This specific user has a valid 'Adult' stamp."
2. Verify (The Quick Check)
- What happens: Every time you want to do something in the app, the app doesn't ask for your ID again.
- The Magic: It just looks at the blockchain note. "Does this user have a valid stamp?" If yes, you're in.
- Why it's cool: This is super fast and cheap. The heavy math was only done once when you got the stamp.
3. Revoke (The "Kill Switch")
- What happens: This is the most important part. In the old world, once you gave your ID to a company, they kept it forever.
- The Magic: You have a Remote Control. If you decide you don't trust the app anymore, you press a button.
- The Result: The "Adult" stamp on the blockchain instantly vanishes. The app can no longer verify you. You have taken back your privacy immediately.
💰 The Cost: Is it Expensive?
The authors tested this on the Ethereum network.
- On the main network: It's like paying for a first-class ticket to fly across the ocean. It costs about $15 per verification, which is too expensive for everyday use.
- On "Layer 2" (The Express Lane): If you use a faster, cheaper side-network (like Arbitrum), the cost drops to less than 50 cents. This makes it affordable for regular people to use.
🔮 What's Next?
The system works great right now, but the authors have a few ideas to make it even safer:
- Preventing "Front-Running": Making sure no one can steal your proof while it's traveling to the blockchain.
- Stopping "Stalkers": Ensuring that even though you have a stamp, no one can track you across different apps to build a profile of your life.
- Super Secure Phones: Moving the math into a special "safe zone" inside your phone so even hackers can't peek at your data while the proof is being made.
📝 The Bottom Line
This paper proves that we don't have to choose between following the rules (like being over 18) and keeping our privacy.
By using Magic Envelopes (Zero-Knowledge Proofs), we can prove we are eligible for things without ever showing our ID cards to the world. It turns the "Glass House" of the blockchain into a place where you can be anonymous but still trustworthy.
Drowning in papers in your field?
Get daily digests of the most novel papers matching your research keywords — with technical summaries, in your language.