TY  - EJOU
AU  - Ansong, Edward Danso 
AU  - Osei, Simon Bonsu 
AU  - Adjei, Raphael Adjetey 

TI  - Implementation and Evaluation of the Zero-Knowledge Protocol for Identity Card Verification
T2  - Journal of Cyber Security

PY  - 2025
VL  - 7
IS  - 1
SN  - 2579-0064

AB  - The surge in identity fraud, driven by the rapid adoption of mobile money, internet banking, and e-services during the COVID-19 pandemic, underscores the need for robust cybersecurity solutions. Zero-Knowledge Proofs (ZKPs) enable secure identity verification by allowing individuals to prove possession of a National ID card without revealing sensitive information. This study implements a ZKP-based identity verification system using Camenisch-Lysyanskaya (CL) signatures, reducing reliance on complex trusted setup ceremonies. While a trusted issuer is still required, as assumed in this work, our approach eliminates the need for broader system-wide trusted parameters. We evaluate the system’s security and privacy against traditional methods, demonstrating resilience to attacks such as man-in-the-middle (MITM), replay, and cloning, while ensuring compliance with GDPR and NIST standards. Experimental results confirm that the protocol prevents leakage of personally identifiable information (PII) and resists message replay, offering a scalable, privacy-preserving solution for national ID systems.
KW  - Cryptographic protocol; authentication mechanisms; protocol; privacy risk; ID card verification; computational demands; zero knowledge protocol; internet-based applications

DO  - 10.32604/jcs.2025.061821