zkMFA: zero-knowledge based multi-factor authentication system

A zero knowledge multi-factor authentication (zkMFA) framework method of authentication of a prover by a verifier comprising:

• initiating authentication via a prover computer device, wherein initiating authentication includes sending prover credentials from the prover computer device to a verifier computer;
• generating, on the prover computer device, a witness, wherein the witness is a random private value;
• computing, on the prover computer device, a commitment, wherein the commitment is a public value derived from the witness;
• sending the commitment from the prover computer device to the verifier computer;
• generating by said verifier computer, a random challenge;
• sending said random challenge from said verifier computer to the prover computer device;
• recreating, in response to the random challenge, at least one set of private keys, wherein the at least one set of private keys is recreated by unmasking at least one set of masked device key fragments with at least one set of masks generated from the prover credentials;
• generating, on the prover computer device
• a public response to the challenge, wherein the public response includes the at least one set of private keys;
• sending the public response from the prover computer device to the verifier computer;
• evaluating, at the verifier computer, the public response;
• determining, at the verifier computer, either one of:
• acceptance of prover identity, rejection of prover identity, or request for continuation of authentication as a judgement for the public response;
• sending the judgment from the verifier computer device to the prover computer device;
• and
• repeating, when the judgment includes a request for continuation of authentication,
• the said step of generating, on the prover computer device, the witness to the step of sending the judgment from the verifier computer device to the prover associated with the prover computer device, until the prover identity is accepted or rejected.

An authentication system for authenticating a prover by a verifier comprising:

• an enrollment center computer configured to be communicatively coupled to a prover computer device;
• and
• an enrollment process that runs on said enrollment center computer, said enrollment process configured to:
• enroll a prover via credentials and identity provided by the prover by use of the prover computer device;
• identify, at the enrollment center, the prover credentials;
• generate at least one set of public variables corresponding to the prover credentials;
• generate, for each prover credential, at least one set of private keys and at least one set of public keys according to a zero-knowledge proof (ZKP) key generation protocol;
• generate, for each prover credential, at least one set of long-term key fragments according to the ZKP key generation protocol, wherein the at least one set of long-term key fragments includes at least one public long-term key fragment and at least one private long-term key fragment;
• generate at least one set of masks based on the prover credentials utilizing a splitting process;
• mask the at least one set of private keys with the at least one set of masks corresponding to the prover credential to create at least one set of masked device key fragments;
• send, for each prover credential, the at least one set of public variables and, the at least one set of masked device key fragments, and the at least one set of private long-term key fragments to the prover computer device;
• store, for each prover credential, the at least one set of public variables, at least one set of public keys, the prover identity, and the at least one set of public long-term key fragments associated with the prover computer device in a database;
• and
• subsequent to the enrollment process, to perform an on demand authentication process comprising:
• receiving, at a verifier computer, a prover authentication request sent from the prover computer device which includes the prover identity;
• generating at least one short-term private key fragment, wherein the at least one short-term private key fragment includes a witness and a commitment, wherein the witness is a random private value, wherein the commitment is a value derived from the witness;
• looking up, via the verifier computer, at least one set of public variables and at least one set of public keys in the database corresponding to the prover identity;
• and
• commencing authentication by the verifier computer until the enrollment center computer accepts or rejects the prover identity.