IDEAS home Printed from https://ideas.repec.org/a/gam/jftint/v17y2025i12p534-d1801163.html

Blockchain–AI–Geolocation Integrated Architecture for Mobile Identity and OTP Verification

Author

Listed:
  • Gajasin Gamage Damith Sulochana

    (Faculty of Graduate Studies and Research, Sri Lanka Institute of Information Technology, Malabe 10115, Sri Lanka)

  • Dilshan Indraraj De Silva

    (Faculty of Computing, Department of Information Technology, Sri Lanka Institute of Information Technology, Malabe 10115, Sri Lanka)

Abstract

One-Time Passwords (OTPs) are a core component of multi-factor authentication in banking, e-commerce, and digital platforms. However, conventional delivery channels such as SMS and email are increasingly vulnerable to SIM-swap fraud, phishing, spoofing, and session hijacking. This study proposes an end-to-end mobile authentication architecture that integrates a permissioned Hyperledger Fabric blockchain for tamper-evident identity management, an AI-driven risk engine for behavioral and SIM-swap anomaly detection, Zero-Knowledge Proofs (ZKPs) for privacy-preserving verification, and geolocation-bound OTP validation for contextual assurance. Hyperledger Fabric is selected for its permissioned governance, configurable endorsement policies, and deterministic chaincode execution, which together support regulatory compliance and high throughput without the overhead of cryptocurrency. The system is implemented as a set of modular microservices that combine encrypted off-chain storage with on-chain hash references and smart-contract–enforced policies for geofencing and privacy protection. Experimental results show sub-0.5 s total verification latency (including ZKP overhead), approximately 850 transactions per second throughput under an OR-endorsement policy, and an F1-score of 0.88 for SIM-swap detection. Collectively, these findings demonstrate a scalable, privacy-centric, and interoperable solution that strengthens OTP-based authentication while preserving user confidentiality, operational transparency, and regulatory compliance across mobile network operators.

Suggested Citation

  • Gajasin Gamage Damith Sulochana & Dilshan Indraraj De Silva, 2025. "Blockchain–AI–Geolocation Integrated Architecture for Mobile Identity and OTP Verification," Future Internet, MDPI, vol. 17(12), pages 1-42, November.
  • Handle: RePEc:gam:jftint:v:17:y:2025:i:12:p:534-:d:1801163
    as

    Download full text from publisher

    File URL: https://www.mdpi.com/1999-5903/17/12/534/pdf
    Download Restriction: no

    File URL: https://www.mdpi.com/1999-5903/17/12/534/
    Download Restriction: no
    ---><---

    More about this item

    Keywords

    ;
    ;
    ;
    ;
    ;

    Statistics

    Access and download statistics

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:gam:jftint:v:17:y:2025:i:12:p:534-:d:1801163. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    We have no bibliographic references for this item. You can help adding them by using this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: MDPI Indexing Manager The email address of this maintainer does not seem to be valid anymore. Please ask MDPI Indexing Manager to update the entry or send us the correct address (email available below). General contact details of provider: https://www.mdpi.com .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.