DID Shield (Decentralized Identifier)

our website didshield.xyz

What are we talking about:

Problem:

Since this activity for airdrop testers is free or requires no more than $ 20-50 per user, the attackers began to create entire farms of multi-accounts (Sybil). When 1 user does testing for 10-50 wallets at once under the guise of different users. Now this is so relevant that many use specially written software and bots that do all the necessary activity on their own without a person. Such farms reach up to 500-3000 accounts.

Of the allocated amount of tokens for all users, such farms take most of them in a dishonest way. For this reason, honest users "do not receive" income for their work and activity.

More in this post: https://www.gitcoin.co/blog/cost-of-forgery

Current situation:

The crypto community actively opposes the problem of Sybil farms, however, the methods they use, such as using cookies, tracking IP addresses, analyzing unique social network users and checking the blockchain for linked farm accounts, are not effective enough. There are entire Sybil communities on the Internet that explain in detail how to bypass these detection methods. They acquire social media accounts, use individual proxy servers, and use other methods to ensure anonymity.

The traditional KYC (Know Your Customer) system, which involves verifying the identity of customers, is also ineffective, since such accounts are subsequently sold on the Internet. In addition, there is a possibility that projects that are familiar with the terms of the airdrop also receive the airdrop in a dishonest way to their wallets.

We offer a solution that will help overcome this situation on both sides and find a balance between security and anonymity. Our solution incorporates innovative biometric voice authentication technology with "liveness" to ensure a high level of security and prevent fraud.

Goals:

Introduce the application to the masses so that this authentication method becomes the standard of quality, reliability and honesty. The most important thing is that the projects themselves begin to use this method of protection, and users will begin to use it. If 1-2 large projects set such an example, then most of the rest will follow their example. And those who do not use the authentication application will distrust the project.

Solution:

Create an Application for IOS, Android and a browser extension for biometric user authentication.

Application function:

Biometric verification and user authentication by FaceID (3D Liveness), voice (it is necessary to read a short text on the screen) and a fingerprint.

1. Install

2. Register

3. Mint

4. Authentication

How it works:

1. The user installs the application.

2. Registering: creating a profile, linking a public wallet address

3. Selects the desired method: face scanning, voice recording and fingerprint scanning, geolocation.

4. Mint zkSBT key.

5. Optionally binds the necessary social. Networks (twitter, discord, telegram).

6. Refers to a site that asks for identity verification by clicking verify identity.

7. A pop-up request pops up in the application about the need to pass a "live" verification.

8. Passes biometric authentication (which the site will request, but it would be preferable in the crypto world to be a voice + fingerprint)

Minuses:

1. The community of the crypto-currency world does not want to advertise themselves and want to remain anonymous, because of which many will not want to be authenticated by passport and FaceID, the solution here will be the possibility of verification by voice and fingerprint.
2. Introduction to the masses of people so that all projects begin to use this method of protection against Sybils. (There is a good chance that the projects themselves are secretly doing their own tasks on multiple accounts, in order to get a quick profit when the project is launched)
3. When verifying by voice, how to make it so that 1 user cannot use his voice on different accounts and wallets?

Pros:

1. Liveness verification - eliminates the resale of accounts, since the wallet will be tied to the account and there will be a periodic need to authenticate again.
2. Using geolocation will exclude the use of proxy IP addresses.
3. Projects using this filtering method will establish themselves as a company that legitimately distributes airdrops to users, and not to itself.
4. The networks will be tested by real users, with real reviews, instead of bots that do not bring projects any benefit.
5. Users can send tokens to each other without fear that they will be blacklisted due to address crossing filters and will not receive an airdrop for their work.