System and method for blockchain-based cross-entity authentication

A non-transitory computer-readable storage medium storing instructions executable by one or more processors, wherein execution of the instructions causes the one or more processors to perform operations comprising:

• obtaining, at a first computing system from a first entity, an authentication request for authenticating a user, wherein the authentication request comprises a decentralized identifier (DID) of the user;
• generating, at the first computing system, a digital signature on the obtained authentication request based on a private key of the first entity;
• generating, at the first computing system, an authorization encrypted with a private key of the user indicating a permission for the first entity to access an authentication result of the user endorsed by a second entity, wherein the encrypted authorization comprises the digital signature and the DID of the user;
• adding, to a blockchain, a blockchain transaction for obtaining the authentication result endorsed by the second entity, wherein the authentication result indicates whether the DID in the authentication request is registered with the second entity, and the blockchain transaction comprises the encrypted authorization;
• obtaining, at the first computing system from the blockchain, the authentication result endorsed by the second entity;
• and
• transmitting the obtained authentication result to the first entity for the first entity to authenticate the user based on the obtained authentication result.

A system comprising one or more processors and one or more non-transitory computer-readable memories coupled to the one or more processors and configured with instructions executable by the one or more processors to cause the system to perform operations comprising:

• obtaining, from a first entity, an authentication request for authenticating a user, wherein the authentication request comprises a decentralized identifier (DID) of the user;
• generating, at the first computing system, a digital signature on the obtained authentication request based on a private key of the first entity;
• generating, at the first computing system, an authorization encrypted with a private key of the user indicating a permission for the first entity to access an authentication result of the user endorsed by a second entity, wherein the encrypted authorization comprises the digital signature and the DID of the user;
• adding, to a blockchain, a blockchain transaction for obtaining the authentication result endorsed by the second entity, wherein the authentication result indicates whether the DID in the authentication request is registered with the second entity, and the blockchain transaction comprises the encrypted authorization;
• obtaining, from the blockchain, the authentication result endorsed by the second entity;
• and
• transmitting the obtained authentication result to the first entity for the first entity to authenticate the user based on the obtained authentication result.