Systems and methods for selectively revealing verifiable private information on a blockchain

1 . A method comprising:

transmitting, by at least one processor of a computing device to a keyless account service comprising a third-party authentication server, an authentication request, the authentication request comprises at least one of a name, an email address, a phone number, an application identifier, a device identifier associated with the computing device, a user identifier, a social media profile, or any combination thereof;

receiving, by the at least one processor of the computing device, from the keyless account service, in response to a positive authentication of the authentication request, an authentication token comprising a keyless account service signature and to-be-revealed information attested to by the keyless account service;

wherein the keyless account service signature is associated with a keyless account service public key of the keyless account service and is computed over at least the following:

a first public key associated with a managing application of a user, and

the to-be-revealed information attested to by the keyless account service:

generating, by the at least one processor, a request to perform a particular activity and an activity signature,

wherein the activity signature is associated with the first public key and is computed over at least the request to perform the particular activity;

submitting, by the at least one processor to a blockchain network, via the managing application, the request to perform the particular activity, the activity signature, and at least one proof of knowledge of the keyless account service signature being a valid keyless account service signature computed over at least the to-be-revealed information;

wherein the blockchain network is configured to:

validate the request to perform the particular activity, based at least in part on a verification, using the first public key, of the activity signature;

obtain and reveal the to-be-revealed information based at least in part on a verification, using the keyless account service public key, of the keyless account service signature to generate a revealed information;

validate the keyless account service signature by verifying the at least one proof of knowledge of the valid keyless account service signature, wherein the valid keyless account service signature validates the revealed information as attested to by the keyless account service; and

wherein, upon successful validation of the activity signature, and the keyless account service signature, the blockchain network is further configured to:

permit at least one operation based at least in part on the request to perform the particular activity.

2 . The method of claim 1 , wherein the at least one proof of knowledge comprises a zero-knowledge proof of knowledge (ZKPoK) comprising a zero-knowledge relation applied to at least one secret input comprising the keyless account service signature;

wherein the to-be-revealed information comprises a public input to the zero-knowledge relation of the ZKPoK; and

wherein, for the particular activity, the blockchain is configured to validate the ZKPoK of the keyless account service signature and the to-be-revealed information based at least in part on the at least one secret input and the zero-knowledge relation.

3 . The method of claim 2 , further comprising obtaining, by the at least one processor, the ZKPoK of the keyless account service signature using at least one zero-knowledge proving service.

4 . The method of claim 1 , wherein the activity signature is based at least in part on an ephemeral to-be-revealed key.

5 . The method of claim 4 , wherein the activity signature is based at least in part on an expiration date defining a time at which the ephemeral to-be-revealed key is configured to expire.

6 . The method of claim 1 , wherein the blockchain is configured to provide the to-be-revealed information to at least one entity to perform at least one fraud risk assessment.

7 . The method of claim 1 , wherein the managing application is configured for managing activities by the user on a blockchain.

8 . The method of claim 1 , wherein a nonce field of the authentication token is populated with at least the first public key associated with the authentication request.

9 . The method of claim 1 , wherein the to-be-revealed information is associated with the authentication request.

10 . The method of claim 9 , wherein the to-be-revealed information is configured to be populated with to-be-revealed data representative of the to-be-revealed information associated with the authentication request.

11 . The method of claim 1 , wherein the activity signature is computed over the particular activity, the keyless account service signature and the to-be-revealed information.

12 . The method of claim 1 , wherein the keyless account service signature is over:

the first public key associated with the user identifier,

a managing application identifier of the managing application of the user,

a nonce field, and

at least one data item representing the to-be-revealed information.

13 . The method of claim 12 , wherein the nonce field is populated with the first public key.

14 . A non-transitory computer-readable medium having software instructions stored thereon, wherein the software instructions, upon execution, are configured to cause at least one processor to perform a method comprising:

transmitting, by a computing device to a keyless account service comprising a third-party authentication server, an authentication request, the authentication request comprises at least one of a name, an email address, a phone number, an application identifier, a device identifier associated with the computing device, a user identifier, a social media profile, or any combination thereof;

receiving, from the keyless account service, in response to a positive authentication of the authentication request, an authentication token comprising a keyless account service signature and to-be-revealed information attested to by the keyless account service;

wherein the keyless account service signature is associated with a keyless account service public key of the keyless account service and is computed over at least the following:

a first public key associated with a managing application of a user, and

the to-be-revealed information attested to by the keyless account service;

generating a request to perform a particular activity and an activity signature,

wherein the activity signature is associated with the first public key and is computed over at least the request to perform the particular activity;

submitting, to a blockchain network, via the managing application, the request to perform the particular activity, the activity signature, and at least one proof of knowledge of the keyless account service signature being a valid keyless account service signature computed over at least the to-be-revealed information:

wherein the blockchain network is configured to:

validate the request to perform the particular activity, based at least in part on a verification, using the first public key, of the activity signature;

obtain and reveal the to-be-revealed information based at least in part on a verification, using the keyless account service public key, of the keyless account service signature to generate a revealed information;

validate the keyless account service signature by verifying the at least one proof of knowledge of the valid keyless account service signature, wherein the valid keyless account service signature validates the revealed information as attested to by the keyless account service; and

wherein, upon successful validation of the activity signature, and the keyless account service signature, the blockchain network is further configured to:

permit at least one operation based at least in part on the request to perform the particular activity.

15 . The non-transitory computer-readable medium of claim 14 :

wherein the at least one proof of knowledge comprises a zero-knowledge proof of knowledge (ZKPoK) comprising a zero-knowledge relation applied to at least one secret input comprising the keyless account service signature;

wherein, for the particular activity, the blockchain is configured to validate the ZKPoK of the keyless account service signature and the to-be-revealed information based at least in part on the at least one secret input and the zero-knowledge relation; and

wherein the to-be-revealed information comprises a public input to the zero-knowledge relation of the ZKPoK.

16 . The non-transitory computer-readable medium of claim 15 , wherein the method further comprises obtaining the ZKPoK of the keyless account service signature using at least one zero-knowledge proving service.

17 . The non-transitory computer-readable medium of claim 14 , wherein the activity signature is based at least in part on an ephemeral to-be-revealed key.

18 . The non-transitory computer-readable medium of claim 17 , wherein the activity signature is based at least in part on an expiration date defining a time at which the ephemeral to-be-revealed key is configured to expire.

19 . The non-transitory computer-readable medium of claim 14 , wherein the blockchain is configured to provide the to-be-revealed information to at least one entity to perform at least one fraud risk assessment.

20 . A system comprising:

at least one processor in communication with at least one non-transitory computer readable medium having software instructions stored thereon, wherein the at least one processor, upon execution of the software instructions, is configured to perform a method comprising:

transmitting, to a keyless account service comprising a third-party authentication server, an authentication request, the authentication request comprises at least one of a name, an email address, a phone number, an application identifier, a device identifier associated with the computing device, a user identifier, a social media profile, or any combination thereof;

receiving, from the keyless account service, in response to a positive authentication of the authentication request, an authentication token comprising a keyless account service signature and to-be-revealed information attested to by the keyless account service;

wherein the keyless account service signature is associated with a keyless account service public key of the keyless account service and is computed over at least the following:

a first public key associated with a managing application of a user and

the to-be-revealed information attested to by the keyless account service;

generating a request to perform a particular activity and an activity signature, wherein the activity signature is associated with the first public key and is computed over at least the request to perform the particular activity;

submitting, to a blockchain network, via the managing application, the request to perform the particular activity, the activity signature, and at least one proof of knowledge of the keyless account service signature being a valid keyless account service signature computed over at least the to-be-revealed information;

wherein the blockchain network is configured to:

validate the request to perform the particular activity, based at least in part on a verification, using the first public key, of the activity signature;

obtain and reveal the to-be-revealed information based at least in part on a verification, using the keyless account service public key, of the keyless account service signature to generate a revealed information;

validate the keyless account service signature by verifying the at least one proof of knowledge of the valid keyless account service signature, wherein the valid keyless account service signature validates the revealed information as attested to by the keyless account service; and

wherein, upon successful validation of the activity signature, and the keyless account service signature, the blockchain network is further configured to:

permit at least one operation based at least in part on the request to perform the particular activity.

21 . The system of claim 20 , wherein the method further comprises:

submitting, by the at least one processor to the blockchain network, via the managing application, wherein the at least one proof of knowledge comprises a zero-knowledge proof of knowledge (ZKPoK) comprising a zero-knowledge relation applied to at least one secret input comprising the keyless account service signature;

wherein, for the particular activity, the blockchain is configured to validate the ZKPoK of the keyless account service signature and the to-be-revealed information based at least in part on the at least one secret input and the zero-knowledge relation; and

wherein the to-be-revealed information comprises a public input to the zero-knowledge relation of the ZKPoK.

22 . The system of claim 21 , wherein the method further comprises obtaining the ZKPoK of the keyless account service signature using at least one zero-knowledge proving service.

23 . The system of claim 20 , wherein the activity signature is based at least in part on an ephemeral to-be-revealed key; and

wherein the activity signature is based at least in part on an expiration date defining a time at which the ephemeral to-be-revealed key is configured to expire.

24 . The system of claim 20 , wherein the blockchain is configured to provide the to-be-revealed information to at least one entity to perform at least one fraud risk assessment.