Authenticating and paying for services using blockchain
In some examples, in an authentication session for authenticating an entity associated with a client device to access a service, a server system is to receive, from the client device, identification information associated with the client device, and verify, using a blockchain network, an existence of the identification information. The server system is to send, to the client device, payment information regarding payment for the service, and receive, from the client device, a token as payment for the service.
1. A non-transitory machine-readable storage medium storing instructions that upon execution cause a server system to:
in an authentication session for authenticating an entity associated with a client device to access a service:
receive, from the client device, identification information associated with the client device;
verify, using a blockchain network, an existence of the identification information;
send, to the client device, payment information regarding payment for the service; and
receive, from the client device, a token as payment for the service.
2. The non-transitory machine-readable storage medium of claim 1 , wherein the instructions upon execution cause the server system to further:
validate the token using the blockchain network.
3. The non-transitory machine-readable storage medium of claim 1 , wherein the authentication session performs layer 2 authentication of the client device.
4. The non-transitory machine-readable storage medium of claim 1 , wherein the instructions upon execution cause the server system to further:
receive, from the client device, a public key of the client device;
validate in the blockchain network if the public key is valid for a blockchain address of the client device; and
send, to the client device, an authentication challenge encrypted using the public key of the client device.
5. The non-transitory machine-readable storage medium of claim 4 , wherein the authentication challenge is further encrypted with a private key of the server system.
6. The non-transitory machine-readable storage medium of claim 4 , wherein the instructions upon execution cause the server system to further:
receive, from the client device, a response to the authentication challenge, the response including an encrypted version of the authentication challenge encrypted using a public key of the server system and a private key of the client device.
7. The non-transitory machine-readable storage medium of claim 6 , wherein the instructions upon execution cause the server system to further:
in response to determining that the authentication challenge was successfully decrypted by the client device, send, to the client device, a success indication for the authentication session.
8. The non-transitory machine-readable storage medium of claim 7 , wherein the sending of the payment information and the receiving of the token are performed by the server system in the authentication session after the receiving of the response to the authentication challenge and prior to the sending of the success indication.
9. The non-transitory machine-readable storage medium of claim 6 , wherein the instructions upon execution cause the server system to further:
in response to determining successful authentication of the client device:
send, to the client device, a term of service that the entity associated with the client device can choose to abide by;
in response to the entity opting to accept the term of service, provide access to the service.
10. The non-transitory machine-readable storage medium of claim 9 , wherein the term of service is included in a smart contract, and wherein accepting the term of service comprises accepting the smart contract, the instructions upon execution cause the server system to further:
in response to the entity accepting the smart contract, implement a payment term of the smart contract for the access to the service.
11. The non-transitory machine-readable storage medium of claim 9 , wherein the instructions upon execution cause the server system to further:
establish an escrow account into which the entity is able to deposit money and from which a service provider of the service can withdraw money as payment for usage of the service; and
use a smart contract to maintain the escrow account.
12. The non-transitory machine-readable storage medium of claim 1 , wherein the instructions that upon execution cause the server system to further:
send, to the client device, a payment refund in response to detecting partial use of the service.
13. A client device comprising:
a communication interface to communicate over a network; and
a processor to:
initiate an authentication session with an authenticator to authenticate the client device for using a service;
receive, from the authenticator, an indication that a blockchain is to be used for authentication of the client device;
in response to the indication, send, to an authentication/payment server in the authentication session, a blockchain address of the client device; and
send, to the authentication/payment server in the authentication session, a cryptographic currency as payment for the service.
14. The client device of claim 13 , wherein the processor is to:
receive, from the authentication/payment server, a smart contract specifying a term of service and payment information that an entity associated with the client device can choose to abide by; and
accept the smart contract to allow the authentication/payment server to obtain payment for using the service according to the payment information in the smart contract.
15. The client device of claim 13 , wherein the processor is to further:
send, to the authentication/payment server, a public key of the client device;
receive, from the authentication/payment server, an encrypted authentication challenge encrypted with the public key of the client device and a private key of the authentication/payment server;
decrypt the encrypted authentication challenge with a private key of the client device and a public key of the authentication/payment server, to produce a decrypted authentication challenge;
send, to the authentication/payment server, an encrypted version of the decrypted authentication challenge, the encrypted version of the decrypted authentication challenge encrypted using the private key of the client device and the public key of the authentication/payment server.
16. A server comprising:
a processor; and
a non-transitory storage medium storing instructions executable on the processor to:
receive, from a client device, an authentication request to initiate an authentication session for authenticating the client device;
send, to the client device, an indication of use of a blockchain to authenticate the client device;
validate identification information of an entity associated with the client device using a blockchain network, the entity being part of a Distributed Autonomous Organization (DAO) that groups entities that are granted access to a service;
invoke a smart contract manager to propose a set of service contract options to the client device; and
process a payment and refund for use of the service by the client device using the blockchain network.
17. The server of claim 16 , wherein at least a portion of the server is part of the blockchain network.
18. The server of claim 16 , wherein the instructions are executable on the processor to:
maintain an escrow account into which an entity associated with the client device deposits a cryptographic currency, and from which the payment is withdrawn by a service provider.
19. The server of claim 18 , wherein the depositing of the cryptographic currency into the escrow account, and the withdrawal of the payment from the escrow account, are governed by a smart contract.
20. The server of claim 16 , wherein the set of service contract options is governed by at least one smart contract.