Blockchain-incorporating distributed authentication system

Abstract

Disclosed herein are system, method, and device embodiments for an authentication workflow incorporating blockchain technology. An embodiment operates by requesting, from a distributed authentication service, transmission of a time-based one-time password to a communication endpoint associated with an end-user, receiving a time-based one-time password submission from a user device associated with the end-user, retrieving a plurality of distributed ledger entries (e.g., a plurality of blocks of a blockchain), and validating the time-based one-time password submission based on the plurality of distributed ledger entries as a part of a two factor authentication workflow.

What is claimed is: 
     
         1 . A system comprising:
 one or more computer memories;   one or more computer processors;   a set of instructions stored in the one or more computer memories, the set of instructions configuring the one or more computer processors to perform operations, the operations comprising:   receiving a one-time password (OTP) request, the OTP request including a client public key associated with a client application;   sending an OTP to a communication endpoint;   generating a shared secret key based on a private key of a distributed authentication service (DAS) and the client public key;   generating an encrypted OTP based on the shared secret key;   generating a block for adding to a blockchain, the block including a DAS public key, the encrypted OTP, and a hash value corresponding to a state of the blockchain prior to the adding of the block to the blockchain; and   replicating the block to instances of the blockchain maintained within a blockchain network.   
     
     
         2 . The system of  claim 1 , wherein the blockchain network includes one or more of permissionless blockchains, permissioned blockchains, or hybrid blockchains. 
     
     
         3 . The system of  claim 1 , wherein the sending of the OTP is part of a challenge in a two-factor authentication workflow. 
     
     
         4 . The system of  claim 1 , wherein the generating of the shared secret key includes using an elliptic curve Diffie-Helman (ECDH) algorithm. 
     
     
         5 . The system of  claim 1 , the operations further comprising using the shared secret key to encrypt a subsequent communication using a symmetric key encryption technique. 
     
     
         6 . The system of  claim 1 , wherein the block is included in a plurality of blocks configured to be retrieved by the client application upon receipt of an OTP submission from the communication endpoint. 
     
     
         7 . The system of  claim 6 , wherein the encrypted OTP is identifiable by the client application based on performance of a consensus algorithm on the plurality of blocks retrieved by the client application. 
     
     
         8 . The system of  claim 7 , wherein the shared secret key is formable by the client application based on a client private key of the client application and the DAS public key. 
     
     
         9 . The system of  claim 8 , wherein the client application is configured to authorize an action by an end user associated with the communication endpoint based on a matching of the OTP submission with an obtained OTP. 
     
     
         10 . The system of  claim 9 , wherein the obtained OTP is obtainable by the client application by decrypting of the encrypted OTP using the shared secret key. 
     
     
         11 . A method comprising:
 receiving a one-time password (OTP) request, the OTP request including a client public key associated with a client application;   sending an OTP to a communication endpoint;   generating a shared secret key based on a private key of a distributed authentication service (DAS) and the client public key;   generating an encrypted OTP based on the shared secret key;   generating a block for adding to a blockchain, the block including a DAS public key, the encrypted OTP, and a hash value corresponding to a state of the blockchain prior to the adding of the block to the blockchain; and   replicating the block to instances of the blockchain maintained within a blockchain network.   
     
     
         12 . The method of  claim 11 , wherein the blockchain network includes one or more of permissionless blockchains, permissioned blockchains, or hybrid blockchains. 
     
     
         13 . The method of  claim 11 , wherein the sending of the OTP is part of a challenge in a two-factor authentication workflow. 
     
     
         14 . The method of  claim 11 , wherein the generating of the shared secret key includes using an elliptic curve Diffie-Helman (ECDH) algorithm. 
     
     
         15 . The method of  claim 11 , the method further comprising using the shared secret key to encrypt a subsequent communication using a symmetric key encryption technique. 
     
     
         16 . The method of  claim 11 , wherein the block is included in a plurality of blocks configured to be retrieved by the client application upon receipt of an OTP submission from the communication endpoint. 
     
     
         17 . A non-transitory computer-readable storage medium storing a set of instructions that, when executed by one or more computer processors, causes the one or more computer processors to perform operations, the operations comprising:
 receiving a one-time password (OTP) request, the OTP request including a client public key associated with a client application;   sending an OTP to a communication endpoint;   generating a shared secret key based on a private key of a distributed authentication service (DAS) and the client public key;   generating an encrypted OTP based on the shared secret key;   generating a block for adding to a blockchain, the block including a DAS public key, the encrypted OTP, and a hash value corresponding to a state of the blockchain prior to the adding of the block to the blockchain; and   replicating the block to instances of the blockchain maintained within a blockchain network.   
     
     
         18 . The non-transitory computer-readable storage medium of  claim 17 , wherein the blockchain network includes one or more of permissionless blockchains, permissioned blockchains, or hybrid blockchains. 
     
     
         19 . The non-transitory computer-readable storage medium of  claim 17 , wherein the sending of the OTP is part of a challenge in a two-factor authentication workflow. 
     
     
         20 . The non-transitory computer-readable storage medium of  claim 17 , wherein the generating of the shared secret key includes using an elliptic curve Diffie-Helman (ECDH) algorithm.