Gamania CloudForce cooperates with BaaSid and realized the safest blockchain certification application ever

With the rising of people’s awareness for the protection of personal information and the increasingly rigorous related laws, network service providers are all doing their best to protect the personal information of clients; however, cases of stolen personal information still happens all the time, and victims even include large institutions such as popular social medias, hotels and airline companies. Once they are targeted by hackers, they will inevitably fall; they could not be protected no matter what protective means they used for information security. This shows that the traditional personal information certification technology architectures that were based on centralized databases are now facing severe tests.

In light of this, the BaaSid team developed an innovative ID verification mechanism based on blockchain over two years ago, and successfully created the world’s first decentralized security authentication blockchain application; it claims that patented engine is used to encrypt and shred personal authentication data in detail, and the shredded data is distributed, scattered and safely stored, and then it uses the “one-time real-time authentication” mode to provide the safest and most convenient authentication service for various network service users.

At the end of 2018, Gamania CloudForce noticed the unique advantage of BaaSid and decided to cooperate with them, committed to promoting the BaaSid technology to the financial, e-commerce and online gaming markets etc. ID (ID authentication) topics were used as the entry point during the initial stages, and then the application pattern was gradually expanded to satisfy the protection needs of more sensitive data.

No original documents are saved, truly eliminating the risk of personal information being stolen

The founder of BaaSid, James Huang, stated that network activities such as authentication, shopping and financial transactions etc. all require the use of ID, and this shows how important ID is; unfortunately, it is quite a weak link and is stolen by hackers every now and then. He thinks the reason why some of the network service providers got hacked was not because they had poor information security capabilities; but instead, it was due to structural problems. Hackers are always able to find loopholes in architectures such as TCP/IP and HTTP. In other words, only by not allowing networks that operate live to store original personal identification information can the current risk be eliminated.

The BaaSid team saw the opportunity to overturn the blind spot of ID authentication from blockchain by coincidence. Undoubtedly, centralized databases are obvious targets for hacker invasions; however, blockchain and the features of IPFS nodes are the perfect remedy to solve this problem. BaaSid uses a patented engine to shred the source of text or image type personal information and dissociates it into hundreds or thousands of data fragments, and then saves them through distribution. When users log into the network service, BaaSid will then use the patented engine again to quickly combine the scattered nodes and data to satisfy the requirements for personal login ID authentication.

James Huang stressed that BaaSid converts sensitive personal information into crushed “puzzles” and places them in large amounts of blockchains and IPFS nodes, then combines the puzzles again when users log in to complete authentication. This means that no original document will be saved online; so even if hackers intrude, they can only get a small piece of the puzzle and will not be able to identify customer data. This eliminates the threats of personal information security and ensures that network service operations can comply with personal information laws and GDPR requirements, and remove the maintenance burden of centralized databases.

The technical features of BaaSid include: First of all, it includes the two major engines Split and Combine; the earlier one fragmentizes the data and sends them to hundreds or thousands of nodes to save them together, and the latter is responsible for quickly combining the data blocks during user authentication. Secondly, BaaSid uses IPFS nodes as the underlying technical protocol, able to save large amounts of fragmentized data more efficiently and securely without the help of any database system.

Another thing worth mentioning is that each data fragment is encrypted and each has individual hash values; the original creation of the Allocation Index Hash algorithm from BaaSid is like a miraculous key; it can quickly locate all related fragments around global nodes and then quickly calculate how to gather all required fragments from limited node sources using the shortest path possible and the most efficient method. Therefore, at the moment the user logs in, it can quickly combine the public and private keys just like opening a safe, and activating the network service needed successfully.

Using account and password with OTP is no longer safe enough; protection should start at the source of the information

The general manager of Gamania CloudForce Paul Ding indicated that this company has lots of experience in information security and deeply understands that most enterprises try very hard to block hackers; however, information leakage events never stopped occurring over the years, and this shows that the protection of sensitive personal information is a very complicated issue. This drove Gamania CloudForce to begin long-term discussions and research on the secure blockchain authentication issue, but appropriate products and services could not be found. After learning about the innovative approach from BaaSid and confirming the feasibility, Gamania CloudForce thought that it matched their preset service direction; not only could it exert the effectiveness of IDaaS (Identity as a Service), it can even be expanded into other application themes besides ID based on the same underlying technology. For example, use BaaSid technology to create data storage and processing methods that are different from traditional ones to provide more effective security management mechanisms for sensitive files such as medical records, intellectual property rights, design diagrams or legal documents etc.

Because of this, Gamania CloudForce and BaaSid signed an agent contract aiming to promote BaaSid solutions to vertical markets including finance, e-commerce and online content services, especially finance, as it is listed as the primary goal because personal information of financial institutions is most sensitive. If traditional practices were continually adopted with only using account, password, and OTP for ID authentication, great risks will be faced; but BaaSid can be used to reinforce existing insufficiencies.

It has been reported that BaaSid cooperated with the Korean Diabetes Association and two major hospitals, planning to include the records of 16 million members, such as diet and medical records, into BaaSid nodes to use as the basis for insurance companies to lower premiums. When it comes to IDaaS, only the hash needs to be matched; but when it comes to the scattering, saving and protecting of medical record information, sometimes the original data needs to be combined when necessary and not only hash. This can be considered another type of Safe Box application that requires careful verification. This is why the cooperation between BaaSid and the Korean Diabetes Association is an important breakthrough for expanding diverse applications, and is worth looking forward to.

Enterprises that adopted the BaaSid technology could choose whether to join public chains or build their own private chains; the former only requires interfacing with the BaaSid SDK, and pay rent according to the actual number of users every month, while the latter is actually relatively complicated. The BaaSid partner (Gamania CloudForce) will discuss detailed issues including node erection, UX/UI design, and backend management mechanism establishment etc. with the customer and create customized solutions according to the application scenario the customer expects.