RESEARCH OF A HYBRID ACCOUNTING DATA MANAGEMENT SYSTEM BASED ON THE COMBINATION OF DID, IPFS, BLOCKCHAIN TECHNOLOGIES

Abstract

This paper examines the concepts of decentralized identifiers and associated credentials, the system for managing such data, and the differences between traditional and decentralized identifiers. In addition, the advantages and disadvantages of decentralized identifiers that already exist are considered and a solution to the challenges facing such identifiers is sought. The challenges facing decentralized identities include the problem of key management, implementation complexity, regulatory uncertainty, cost of operational support, and ease of use. To address these problems, a system concept using a hybrid approach is proposed, which is characterized by using a combination of client-server architecture for storing credentials in IPFS and fingerprints in the blockchain, the immutability of which should protect against the use of fake credentials. Methods for binding IPFS data to a persistent identifier that can point to different data are also compared: IPNS, DNSLink, ENS. Based on this, we developed the ENS-IPFS model of a decentralized identifier and demonstrated a way to integrate such a decentralized model into a hybrid credential management system. During the development of the system, we also developed a mathematical-logical apparatus that allows us to determine whether a credential belongs to a set of reliable ones, and described the algorithm of user authentication through the use of a fingerprint of his credential and solving a cryptographic problem to prove that he owns a private key, on the basis of which a public key was formed, which, in combination with the data identifier, forms a fingerprint that is checked for compliance with what is stored in the blockchain. The results of the study allowed us to confirm the hypothesis about the possibility of using hybrid technologies in the context of using decentralized technologies and credential management. In addition, the data obtained allowed us to form paths for further research and to form a conclusion about the possibility of applying the approach as one that has prospects for parallel application with centralized and decentralized systems and can also play an intermediate link in the transition from a centralized to a decentralized model.