Zero-knowledge age verification proves users are old enough without exposing personal data. Privacy-first compliance for websites - no surveillance, just proof.
The growing incidence of the digital ecosystem renders the digital identity as an essential component for secure and seamless transactions. Access restrictions are important across most of the digital domain. With the ever growing significance of digital interactions, or be it various government measures linked together with a common identity, the restrictions and permissions to access digital media are becoming ever more important.
Digital Identity at its core also includes age verification in a very large number of use cases. Most of the validations related to a digital identity solution have valid age as a basic underlying criterion. This aspect is crucial for the successful execution of the digital Identity mechanism as there are a lot of real-life examples where users are provided or restricted access based on their age. Hence, it is crucial that the digital Identity solution is able to accurately and seamlessly provide the confirmation of the User’s age. Regulators across the globe have acknowledged and acted on this topic. KYC in banks or eligibility to government subsidies or application of SIM cards with a telecom operator to name just a few, each has age verification as an underlying criterion, along with others, to provide an affirmation or otherwise to the verifier for further action.
Solution for Digital Identity and Age Verification
Zero Knowledge Proof (ZKP) technology can solve these problems by guaranteeing privacy and reassuring users that both their data as well as their browsing history remain private and secure. Global regulation / investigations aiming to restrict access to certain content/ sites are increasing, along with financial (and criminal in some cases) penalties for non-compliance. These include multiple jurisdictions including the ones in Europe (Spain, France, and UK) and the USA (Louisiana, Utah, Texas, and several others).
Billions Network’s Age Verification Solution
Billions Network’s solution enables an identity web wallet to store a “proof of age” verifiable credential. When the user attempts to access an age restricted site, the content site will set a query for the user to demonstrate that he is of appropriate age. The query is flexible, leveraging Billions Network’s zero knowledge query language, which means that the query could be of an age majority (age \> 18), but could also be a maximum age query (age \< 65\) or an age range query (age between 40 and 50).
The user can create the identity wallet by login-in with his email or a passkey on his own device. The user can obtain the credential from any of the authorized age verification providers in the open Billions Network ecosystem. This allows flexibility for a variety of age verification methods to be used (voice check, facial scan, id document scan, etc.)
Once the user has obtained the proof of age credential from the provider he is able to generate a ZK proof to demonstrate that a user has an appropriate age. The ZK proof is generated in response to the original query generated by the content site at the beginning of the process.
The verifier upon receiving the proof validates the correctness of the proof by running it through ZKP logic with only the public input values, as well as verifying that the credential has not been revoked by checking that Merkle tree proof is valid and comparing it to the issuer’s on-chain revocation tree. The proof can also be submitted to an on-chain verifier (smart contract) that will verify the validity of the proof received. This allows proofs derived from off-chain credentials to be used in on-chain interactions.
The verifiable credential data itself is off-chain, the only data on-chain are the issuer’s DID identifier and issuer state which reside in a Billions Network smart contract.
Usage of private and public keys
Issuer public key: a claim of usage of this key is included via the issuer’s on-chain issuer state
Issuer private key: used to sign the proof of age credential
User public and private key: used in the creation of the identity wallet and also to derive the user did identifier
The Billions Network mechanism decouples the identity from the keys and allows for creation of additional identifiers (DIDs or profiles) and key rotation, which improves security (and is equivalent to periodically changing the lock on your front door).
You can go through the source: https://billions.network/blog/privacy-preserving-age-verification-a-zero-knowledge-approach-to-digital-identity-compliance.
