Open Arsenal

Human Proof. Device Trust.

Proofora is a blockchain-based identity and authentication protocol designed to create a cryptographically verifiable relationship between a real person, their identity credential, and their authorized devices. The protocol begins with video-based liveness verification and captures a set of standardized facial snapshots. A randomized subset of those snapshots is converted into cryptographic commitments, creating an identity proof that can be verified without placing the user’s underlying biometric images on the blockchain.

Proofora uses canonical image processing, timestamped capture information, cryptographic hashing, and Merkle-based verification to create tamper-evident biometric commitments. Rather than treating a photograph or biometric measurement as a password, Proofora uses the resulting commitments to establish possession of an enrolled credential. During authentication, the server can issue randomized cryptographic challenges that require the user’s local system to produce the appropriate proof, helping protect against replay attacks and unauthorized credential reuse.

The protocol also extends identity verification to the user’s devices. Each authorized device can receive its own cryptographic key pair and become independently registered to the user’s identity. Devices can authenticate themselves through signed challenges, while new devices can be added through an authorized pairing process and compromised devices can be revoked without invalidating the user’s entire identity. This creates a cryptographically verifiable identity and device trust network rather than relying solely on usernames, passwords, or centralized session credentials.

Proofora is designed with privacy and user control as foundational principles. Sensitive biometric material and private keys remain under controlled custody rather than being stored directly on-chain, while the blockchain can maintain verifiable identity commitments, credential status, device authorizations, timestamps, and revocation records. The architecture can also support selective disclosure and zero-knowledge verification, allowing a user to prove possession of a valid identity credential or satisfy a required identity condition without unnecessarily exposing the underlying personal information.

This specification is released under the GNU Affero General Public License v3.0 or later (AGPL-3.0+) and is free to use with required attribution. Attribution-free deployment is available through a Specification Branding License, with fees based on deployment scope and network size.