Digital identity verification often forces a privacy trade-off, where users must disclose sensitive personal data to prove simple eligibility criteria. As blockchain applications integrate with regulated environments, this over-disclosure creates significant risks of data breaches and surveillance. This work proposes a general Selective Disclosure Framework built on Ethereum, designed to decouple attribute verification from identity revelation. By utilizing client-side zk-SNARKs, the framework enables users to prove specific eligibility predicates without revealing underlying identity documents. We present a case study, ZK-Compliance, which implements a functional Grant, Verify, Revoke lifecycle for age verification. Preliminary results indicate that strict compliance requirements can be satisfied with negligible client-side latency (< 200 ms) while preserving the pseudonymous nature of public blockchains.
翻译:数字身份验证常常迫使用户在隐私方面做出妥协,即必须披露敏感的个人数据以证明简单的资格标准。随着区块链应用融入受监管环境,这种过度披露会带来数据泄露和监控的重大风险。本研究提出了一种构建于以太坊之上的通用选择性披露框架,旨在将属性验证与身份揭示解耦。通过利用客户端zk-SNARKs,该框架使用户能够证明特定的资格谓词,而无需揭示底层身份文件。我们提出了一个案例研究ZK-Compliance,该案例为年龄验证实现了完整的授权、验证、撤销生命周期。初步结果表明,严格的合规性要求可以在保持公共区块链匿名性的同时,以可忽略的客户端延迟(<200毫秒)得到满足。