BVI：轻量级、以数据为中心的基于区块链的身份声明验证
BVI: Lightweight, Data-Centric Blockchain-Based Verification of Identity Claims
- The University of Queensland（昆士兰大学）
机构由 AI 辅助整理，请以论文原文为准。
AI总结：
针对语音呼叫身份无法验证的问题，提出BVI，一种基于区块链的轻量级验证方法，通过公共账本存储凭证状态并在手机端执行检查，以低gas成本检测路径重写，提升身份验证可靠性。
AI中文摘要：
接到一个自称来自银行的意外电话的人无法核实这一声明。自2026年7月1日起，澳大利亚短信服务在发送方标识符未注册时将消息标记为未验证，但语音电话仍然没有任何信息支持地到达，而语音克隆已消除了接收者所依赖的最后线索。我们提出BVI，它为接收者回答一个问题：呼叫方是否证明了其持有注册组织为此呼叫签发的凭证？BVI将组织记录、其授权渠道及其撤销状态以可直接查询的形式保存在公共账本上，并将所有决策逻辑置于手机中，手机执行十一项检查，不支付交易费用且不持有全链状态。我们定义了十类攻击以及撤销无法解决的情况，在覆盖BBCA、内容摘要、检测器和组合BVI的10×4覆盖矩阵中进行比较，并针对BVI合约的隔离Hardhat固定状态运行27个自动化场景测试；全部27个测试通过。对于媒体替换和合成语音，合约测试验证承诺和门控属性，而非声称检测器准确性。每个会话强制性的锚定成本约为91.5k gas，且与通话时长和跳数无关；每个参与的中间人额外贡献一次可选的证明写入。在每小区20,000次会话的路径模拟中，在四分之一运营商参与率下，BVI检测到20.6%的随机位于路径内的重写，而逐跳比较仅为0.1%，同时身份和内容证据即使在路径证据不确定时仍可用。我们还量化了锚定设计的吞吐量上限。
英文摘要：
A person who answers an unexpected call claiming to come from a bank has no way to check the claim. Australian text messaging has labelled a message as unverified when the sender identifier is not registered since 1 July 2026, but a voice call still arrives with nothing behind it, and voice cloning has removed the last cue recipients relied on. We present BVI, which answers one question for the recipient: did the calling party prove it holds a credential a registered organisation issued for this call? BVI keeps the organisational record, its authorised channels and its revocation state on a public ledger in a directly queryable form, and puts all decision logic in the handset, which performs eleven checks, pays no transaction fee and holds no full-chain state. We define ten attack classes plus the case in which revocation cannot be resolved, compare them in a 10-by-4 coverage matrix spanning BBCA, the content digest, the detector and composed BVI, and run 27 automated scenario tests against isolated Hardhat fixture states of the BVI contract; all 27 pass. For media substitution and synthetic speech, the contract tests validate commitment and gating properties rather than claiming detector accuracy. The mandatory per-session anchor costs about 91.5k gas and is invariant in call duration and hop count; each participating intermediary additionally contributes one optional attestation write. In a 20,000-session-per-cell path simulation, at one quarter carrier participation BVI detects 20.6 per cent of randomly located in-path rewrites versus 0.1 per cent for the every-hop comparison, while identity and content evidence remain available even when path evidence is indeterminate. We also quantify the throughput ceiling of the anchoring design.
