This is an early access version, the complete PDF, HTML, and XML versions will be available soon.
Open AccessArticle
Blockchain–AI–Geolocation Integrated Architecture for Mobile Identity and OTP Verification
by
Gajasin Gamage Damith Sulochana
Gajasin Gamage Damith Sulochana 1
and
Dilshan Indraraj De Silva
Dilshan Indraraj De Silva 2,*
1
Faculty of Graduate Studies and Research, Sri Lanka Institute of Information Technology, Malabe 10115, Sri Lanka
2
Faculty of Computing, Department of Information Technology, Sri Lanka Institute of Information Technology, Malabe 10115, Sri Lanka
*
Author to whom correspondence should be addressed.
Future Internet 2025, 17(12), 534; https://doi.org/10.3390/fi17120534 (registering DOI)
Submission received: 10 October 2025
/
Revised: 18 November 2025
/
Accepted: 20 November 2025
/
Published: 23 November 2025
Abstract
One-Time Passwords (OTPs) are a core component of multi-factor authentication in banking, e-commerce, and digital platforms. However, conventional delivery channels such as SMS and email are increasingly vulnerable to SIM-swap fraud, phishing, spoofing, and session hijacking. This study proposes an end-to-end mobile authentication architecture that integrates a permissioned Hyperledger Fabric blockchain for tamper-evident identity management, an AI-driven risk engine for behavioral and SIM-swap anomaly detection, Zero-Knowledge Proofs (ZKPs) for privacy-preserving verification, and geolocation-bound OTP validation for contextual assurance. Hyperledger Fabric is selected for its permissioned governance, configurable endorsement policies, and deterministic chaincode execution, which together support regulatory compliance and high throughput without the overhead of cryptocurrency. The system is implemented as a set of modular microservices that combine encrypted off-chain storage with on-chain hash references and smart-contract–enforced policies for geofencing and privacy protection. Experimental results show sub-0.5 s total verification latency (including ZKP overhead), approximately 850 transactions per second throughput under an OR-endorsement policy, and an F1-score of 0.88 for SIM-swap detection. Collectively, these findings demonstrate a scalable, privacy-centric, and interoperable solution that strengthens OTP-based authentication while preserving user confidentiality, operational transparency, and regulatory compliance across mobile network operators.
Share and Cite
MDPI and ACS Style
Sulochana, G.G.D.; Silva, D.I.D.
Blockchain–AI–Geolocation Integrated Architecture for Mobile Identity and OTP Verification. Future Internet 2025, 17, 534.
https://doi.org/10.3390/fi17120534
AMA Style
Sulochana GGD, Silva DID.
Blockchain–AI–Geolocation Integrated Architecture for Mobile Identity and OTP Verification. Future Internet. 2025; 17(12):534.
https://doi.org/10.3390/fi17120534
Chicago/Turabian Style
Sulochana, Gajasin Gamage Damith, and Dilshan Indraraj De Silva.
2025. "Blockchain–AI–Geolocation Integrated Architecture for Mobile Identity and OTP Verification" Future Internet 17, no. 12: 534.
https://doi.org/10.3390/fi17120534
APA Style
Sulochana, G. G. D., & Silva, D. I. D.
(2025). Blockchain–AI–Geolocation Integrated Architecture for Mobile Identity and OTP Verification. Future Internet, 17(12), 534.
https://doi.org/10.3390/fi17120534
Note that from the first issue of 2016, this journal uses article numbers instead of page numbers. See further details
here.
Article Metrics
Article Access Statistics
For more information on the journal statistics, click
here.
Multiple requests from the same IP address are counted as one view.