DUOLABS
Work

Decentralized identity service

We built the app-side authentication flow for a decentralized identity service that piloted a blockchain ledger in a telecom carrier's integrated account authentication. The pilot tested replacing a structure where a central server managed identity with blockchain-based verification. From the authentication request to the verification result, the app, the server, and the blockchain ledger interlock, so if one side's processing state drifts from the app screen, the user cannot tell whether authentication finished. The app was built together with another developer who took part of the features, and integration points were coordinated with the server developer.

Launch
2018
Client
A Korean telecom carrier
Type
Banking & Identity

01 / 04

Identity verified against a blockchain ledger instead of a central server

In a pilot that introduced a blockchain ledger into a telecom carrier's integrated account authentication, we implemented the app features linking the authentication flow to the ledger. In decentralized identity, a single company's database does not vouch for identity on its own; identity is verified against records on a tamper-resistant blockchain ledger and public-key signatures. The app-side processing was structured so the user's identity information and authentication state connect to blockchain-based verification. Before the term decentralized identity (DID) was widely used, the pilot tested verifying identity through a distributed structure instead of central management.

Identity verified against a blockchain ledger instead of a central server
02 / 04

The steps the app shows from authentication request to verification result

In the decentralized identity app, the user requests authentication and then checks the verification result. In between, blockchain processing state and server responses were connected to app state so the user can follow the progress and outcome on screen. The decentralized identity structure, which differs from server-centred authentication, was reflected in both the screens and the logic.

The steps the app shows from authentication request to verification result
03 / 04

Authentication data that stays verifiable through public keys and signatures

The decentralized identity app's logic was built on a public-key structure so that authentication data does not end at being sent but carries on in a verifiable state. For security-critical logic such as asymmetric keys, signatures, and authentication state checks, we applied public-key authentication experience from an earlier biometric authentication project. This app logic was designed to match the server and blockchain integration flow.

Authentication data that stays verifiable through public keys and signatures
04 / 04

Joint coordination where the app, server, and ledger interlock

The blockchain identity service was built with a heavy server side. With the server developer, we coordinated the points where app and server meet: ledger integration, authentication requests and responses, and error-state handling. The app was co-developed with the other platform's developer, splitting features between us and aligning the specification so both platforms deliver the same authentication policy and user flow.

Joint coordination where the app, server, and ledger interlock

Highlights

01

A decentralized identity flow from authentication request to verification result

02

Integration that maps blockchain processing state and server responses to app state

03

Public-key and signature-based security logic with authentication state checks

Insights

Read the blog