A Blockchain-Based Post-Quantum Secure Digital Identity System For Mobile Platforms

Abstract

Its the nature of such dynamic environments creates an underbelly of systemic vulnerabilities which can become untenable due to the future rise of quantum computing, which can rupture the cryptographic foundations of traditional digital identity (DID). In this paper we propose a new Blockchain-Based PQ-DID framework for mobile platforms. We present a secure scalable and privacy-preserving architecture based on decentralized identity with quantum-resistant cryptographic primitives. More precisely, the framework combines CRYSTALS-Kyber for key encapsulation and Dilithium for digital signatures; both are NIST lattice-based schemes that have been recommended to resist both classical and quantum computer attacks. A permissioned blockchain based on Hyperledger Fabric underlies the identity infrastructure to control identity issuance, authentication, delegation and revocation through smart contracts. To mitigate the computational requirement bottlenecks in mobile devices. Our system integrates lightweight cryptographic primitives, including Merkle tree proof generators, zk-SNARKs for selective disclosure and secure key storage via TEEs, e.g., ARM Trust Zone. This is even better weighed in with biometric based multi factor authentication that adds to identity assurance.We experimentally evaluate the PQ-DID system on Android-based devices to show that it can achieve an average authentication latency of 224 ms, block validation time of 1.32 seconds, average CPU use of 18.7% at practical levels for real-time mobile applications. We have conducted several security assessments under quantum threat models, confirming that it can resist such attacks on more than 99.98% of the occasions it is exposed, with resilience to attack using Shor's and Grover's quantum algorithms. By implementing post-quantum cryptography and zero-knowledge protocols the proposed framework provides 42.3% higher cryptographic robustness and 31.5% higher privacy preserving authentication compared to elliptic curve cryptography (ECC)-based solutions. These results validate that the PQ-DID framework is a viable next-generation mobile digital identity solution. It offers a future-proof security framework for identity management across industries like finance, health and digital identity for the next post-quantum world.

Keywords

Post-Quantum Cryptography, Digital Identity, Blockchain, Mobile Security, Zero-Knowledge Proofs, Trusted Execution Environment.