DOI : 10.5281/zenodo.22255711
- Open Access
- Authors : Hemachandiran A, Ms. S. Sumalatha
- Paper ID : IJERTV15IS051244
- Volume & Issue : Volume 15, Issue 05 , May – 2026
- Published (First Online): 02-09-2026
- ISSN (Online) : 2278-0181
- Publisher Name : IJERT
- License:
This work is licensed under a Creative Commons Attribution 4.0 International License
Decentralized Academic Certificate Verification System Using Blockchain
Hemachandiran A (Student)
Department of Information Technology Alpha College of Engineering Chennai, India
Ms. S. Sumalatha
Assistant Professor
Departmentof Information Technology Alpha College of Engineering Chennai, India
Abstract-Blockchain-based certificate verification systems provide a secure and decentralized approach for validating academic credentials. By leveraging immutable ledgers and cryptographic hashing, these systems ensure data integrity and prevent unauthorized modifications. This approach eliminates dependency on centralized authorities, enabling transparent, tamper-proof, and real-time verification of certificates.This paper presents a secure and decentralized framework for academic certificate verification by leveraging Blockchain and distributed storage systems. Traditional certificate validation mechanisms rely on centralized infrastructures, which are vulnerable to forgery, unauthorized modification, and operational inefficiencies. To overcome these limitations, the proposed system integrates the Polygon blockchain, InterPlanetary File System (IPFS), and SHA-256 hashlng to ensure data immutability, integrity, and secure storage.An enhanced authentication mechanism based on email One-Time Password (OTP) verification is incorporated to strengthen user identity validation during registration and login processes. The system implements role-based access control for administrators, students, and verifiers, enabling secure certificate issuance and efficient real-time validation through QR code based verification. Experimental evaluation demonstrates that the proposed system significantly improves reliability, reduces verification time, and provides strong resistance against data tampering compared to traditional approaches.Overall, the pro posed solution offers a scalable, cost-effective, and trustworthy framework for digital credential management, making it suit able for real-world deployment in academic and organizational environments.
Index Terms-Blockchain, IPFS, Smart Contracts, Certificate Verification, SHA-256, Email OfP Authentication
-
INTRODUCTION
Academic credentials play a critical role in validating an in dividual's educational qualifications and professional eligibil ity across academic institutions, industries, and govennnental organizations. However, the rapid digitization of records and increasing global mobility have exposed significant vulnera bilities in traditional certificate management systems. Conven tional verification mechanisms rely on centralized databases, manual approval processes, and institutional intermediaries, making them inefficient, time-consuming, and highly suscep tible to security breaches.
One of the most pressing challenges in existing systems is the proliferation of fraudulent certificates, which nndermines
trust in educational institutions and recruitment processes. According to recent studies, certificate forgery has increased significantly due to the ease of digital manipulation and lack of standardized verification frameworks. Furthermore, centralized systems introduce a single point of failure, making them vulnerable to cyberattacks, unauthorized modifications, and data loss. These limitations highlight the urgent need for a secure, transparent, and decentralized approach to credential verification.
Emerging technologies such as Blockchain have introduced a paradigm shift in data integrity and trust management. Blockchain enables a decentralized and immutable ledger where data, once recorded, cannot be altered without consen sus, thereby ensuring tamper-proof storage. However, storing large certificate files directly on-chain is inefficient and costly. To address this, decentralized storage solutions like InterPlane tary File System (IPFS) are utilized to store certificate data off chain while maintaining secure references on the blockchain.
In addition, modern systems require robust user authentica tion mechanisms to prevent unauthorized access. Traditional password-based systems are inadequate in protecting sensitive academic data. Therefore, this work integrates multi-factor authentication using email-based One-Time Password (OTP) to enhance identity verification and system security.
This paper proposes a decentralized academic certificate verification system that integrates blockchain, IPFS, and cryp tographic hashing (SHA-256) to ensure data integrity, secu rity, and scalability. The system enables institutions to issue tamper-proof digital certificates, while verifiers can instantly validate authenticity using QR codes and blockchain records. By eliminating reliance on centralized authorities, the pro posed solution significantly reduces verification time, enhances transparency, and provides a scalable infrastructure for real world deployment.
The main contributions of this work include:
I) Decentralized Certificate Management: The primary contribution lies in the design and implementation of a secure and decentralized academic certificate verification system leveraging Blockchain technology. The proposed system eliminates the dependency on centralized au-
thorities by enabling a trustless verification mechanism, where certificate authenticity can be validated directly through immutable blockchain records.
-
Hybrid Storage Architecture: The system introduces an efficient hybrid storage architecture through the inte gration of the lnterPlanetary File System (IPFS). In stead of storing large certificate files directly on the blockchain, which is computationally expensive and inefficient, the certificates are securely stored in IPFS, and only their corresponding content identifiers and cryptographic hashes are recorded on the blockchain.
-
Robust Authentication Mechanism: This work in corporates a robust authentication mechanism using email-based One-Time Password (OTP) verification to strengthen system security. Unlike conventional password-based systems, the OTP-based approach pro vides an additional layer of protection by ensuring that only authorized users can access or interact with the system.
-
Smart Contract Automation: The system employs smart
contract-based automation to manage certificate is suance, validation, and revocation processes. These smart contracts, deployed on the blockchain, ensure that all operations are executed in a transparent, secure, and tamper-proof manner without requiring third-party intervention.
-
-
LITERATURE SURVEY
Recent advancements in blockchain technology have led to significant research in the domain of academic ce1tifkate verification systems. Various studies have explored the use of decentralized architectures, smart contracts, and distributed storage to address the limitations of traditional verification methods.
Dheeraj Shukla et al. [l] proposed a blockchain-based
academic certificate verification system using the Ethereum platform. Their approach stores certificate data as blockchain transactions, ensuring immutability and resistance to tamper ing. The system assigns unique identifiers lo each certificate, enabling verification by third parties. While the model im proves security and eliminates forgery, it primarily focuses on blockchain storage and lacks advanced usability features such as QR-based verification and user-friendly interfaces.
Shraddha H. D and Sushmitha N [2] introduced a system
combining blockchain with lPFS for decentralized certificate storage. Their work demonstrates that integrating IPFS re duces storage costs and enhances scalability by storing large certificate files off-chain while maintaining hashes on the hlockchain. This approach significantly improves efficiency and transparency compared to traditional systems. However,
the system does not incorporate real-time verification mecha nisms such as QR codes or strong authentication techniques. Gangwar el al. [3] proposed a blockchain-based decen tralized application (DApp) for certificate verification that integrates smart contracts, IPFS storage, and QR code-based validation. The system enables rapid verification of certificates
and reduces dependency on centralized authorities. Experi mental results show reduced operational costs and improved verification speed. However, the system lacks multi-factor au thentication mechanisms, making it vulnerable to unauthorized
access.
Rahman et al. [4J developed a blockchai n-based credential verification system utilizing IPFS for storage and hashing techniques for identity generation.·1n this model, certificates are stored in IPFS, and a unique hash is recorded on the blockchain. The system ensures tamper-proof storage and efficient verification while reducing computational costs. Their results indicate that decentralized storage combined with blockchain significantly enhances reliability and scalability.
A systematic literature review by Rustemi et al. [5] analyzed
multiple blockchain-based certificate verification systems and identified key research themes such as security, decentral ization, scalability, and usability. The study highlights that blockchain can provide immutable and trustworthy academic records while reducing reliance on centralized authorities.
However, it also emphasizes that most existing solutions are still in early development stages and require improvements in usability and real-world deployment.
Ambast et al. [6] proposed a blockchain-based credential
verification system using IPFS, focusing on secure data sharing and decentralized storage. Their work highlights the impor tance of off-chain storage to handle large datasets efficiently while maintaining data integrity through blockchain hashes. The system improves scalability but does not address user authentication challenges.
Additionally, several studies have explored blockchain frameworks for certificate verification that emphasize trans parency, immutability, and cost efficiency. These systems demonstrate that blockchain-based solutions eliminate the need for third-party verification and significantly reduce pro cessing time. However, they often lack comprehensive user
authentication mechanisms and user-friendly interfaces.
Ill. PROBLEM STATEMENT
Traditional academic certificate verification systems face significant challenges that limit their reliability, security, and efficiency in modem digital environments. One of the most critical issues is the widespread possibility of certificate forgery and tampering, as digital documents can be easily duplicated, altered, or fabricated using readily available tools.
This undermines the credibility of academic credentials and creates serious risks for organizations relying on them for recruitment and validation purposes.
In addition, existing systems are predominantly centralized, meaning that all certificate data is stored and managed by a single authority such as an educational institution or governing body. This centralized architecture introduces a single point of failure, making the system highly vulnerable 10 cyber attacks, data breaches, and unauthorized modifications. Any compromise in the central database can lead 10 large-scale data corruption or loss, affecting the integrity of the entire
system.
Another major limitation is the inefficiency of traditional verification processes, which often involve manual com munication between institutions, physical document checks, or email-based confirmations. These procedures are time
consuming, resource-intensive, and prone to human error, resulting in delays and reduced operational productivity. Fur thermore, the lack of transparency in such systems makes it difficult for third parties to independently verify the authen ticity of certificates without relying on institutional approval. Security is further weakened by inadequate authentication mechanisms. Many existing platforms rely solely on basic credentials such as usernames and passwords, which are sus ceptible to phishing, credential theft, and unauthorized access.
This exposes sensitive academic data to potential misuse and compromises user privacy.
These challenges collectively highlight the urgent need for
a decentralized, secure, and automated certificate verifica tion system. By leveraging advanced technologies such as Blockchain, lnterPlanetary File System, and cryptographic hashing techniques like SHA-256, it is possible to ensure data integrity, enhance transparency, eliminate single points of failure, and enable efficient real-time verification of academic credentials.
-
OBJECTIVES
The primary objective of the proposed system is to develop a secure, reliable, and scalable academic certificate verifica tion framework that addresses the limitations of traditional approaches. Key goals include:
I) Eliminate Certificate Forgery: A key goal of this work is to eliminate certificate forgery and unauthorized modifications by leveraging the immutability property of Blockchain, ensuring that once certificate data is recorded, it cannot be altered without consensus. This guarantees the authenticity and integrity of academic
credentials.
-
Efficient Bulk Certificate Generation: Enable efficient bulk certificate generation through structured datasets such as Excel files, enabling institutions to automate the issuance process and handle large volumes of stu dent records with minimal administrative effort. This
significantly improves operational efficiency and reduces manual workload.
-
Enhanced Security: Enhance system security through a robust authentication mechanism based on email One-Time Password (OTP) verification. This approach strengthens user identity validation and prevents unau thorized access, ensuring that only legitimate users can interact with the system.
-
Real-time QR-based Verification: Provide real-time and
user-friendly verification through the integration of QR code technology. By scanning a QR code embedded in the certificate, verifiers can instantly access and validate certificate authenticity without relying on manual pro cesses or institutional intermediaries.
-
Data Integrity: Ensure data integrity through the use of cryptographic hashing techniques such as SHA-256. This guarnntees that any alteration in certificate data can be immediately detected through hash mismatch during verification.
-
Scalability and Usability: Design the system to be scal able and user-friendly, supporting seamless interaction for administrators, students, and verifiers. By combining decentralized storage using IPFS with blockchain-based validation, ensure etlicient performance, reduced opera tional costs, and adaptability for real-world deployment.
-
-
PROPOSED SYSTEM
The proposed system is designed as a decentralized and secure architecture that integrates Blockchain, lnterPlanetary File System, and advanced authentication mechanisms to ensure reliable academic certificate issuance and verificalion.
The system eliminates reliance on centralized authorities by distributing data across a blockchain network while utilizing IPFS for efficient oftCchain storage. This hybrid architec ture enhances scalability, reduces storage costs, and ensures
tamper-proof data management.
-
System Architecture Overview
The system is structured into multiple functional modules, each responsible for specific operations within the framework:
-
Administrative Module: The administrative module serves as the core control unit, allowing authorized personnel to upload student data in bulk using structured datasets such as Excel files. Upon data submission, digital certificates are gen
erated and securely stored in IPFS, which produces a unique
Content Identifier (CID) for each certificate. A cryptographic hash of the certificate, generated using SHA-256, along with the corresponding CID, is then recorded on the blockchain to ensure immutability and verifiability.
-
Student Module: The student module provides a secure interface for users to access their certificates. Students can log in Lo the system using email-based authentication combined with One-Time Password (OTP) verification, ensuring that only authorized individuals can access their records. Once authenticated, users can view, download, and manage their academic certificates in a secure and user-friendly environ ment.
-
Verifier Mvdule: The verifier module enables third par ties, such as employers or insti1utions, to validate certificates efficiently. Verification can be performed either by entering a unique certificate identifier or by scanning a QR code embedded within the certificate. The system retrieves the corresponding blockchain record, recalculates Lhe hash of Lhe provided certificate, and compares it with the stored hash to determine authenticity. The verification result is then displayed in real time, indicating whether the certificate is valid, invalid,
or revoked.
-
-
Authentication Mechanism
A significant enhancement of the proposed system is the integration of email-based OTP authentication, which intro duces an additional layer of security beyond traditional login mechanisms. In this process, the user initiates authentication
by entering their registered email address, after which a time sensitive OTP is generated and transmitted to the user's email. The user must provide the correct OTP within a predefined
time frame to gain access. This approach ensures two-factor
authentication, prevents unauthorized access, and strengthens
identity validation within the system.
-
Data Flow
The data How within the system follows a su-uctured and secure pipeline. When a certificate is generated, it is first uploaded to IPFS, which returns a unique CID representing the file. A SHA-256 hash is then computed using the certificate data and associated metadata. This hash is stored on the blockchain through a smart contract, ensuring immutability and transparency. Meanwhile, additional metadata such as stu
Jent details and certificate references are storeJ in a relational database (PostgreSQL) to enable efficient querying and system perfonnance. During verification, the system recomputes the hash of the provided certificate and compares it with the blockchain-stored hash to ensure integrity and authenticity.
Overall, the proposed system provides a comprehensive solution that combines decentralized storage, cryptographic security, and automated verification mechanisms to deliver a scalable, efficient, and tamper-resistant academic certificate management platform.
-
-
METHODOLOGY
The proposed system follows a structured and secure work flow that integrates decentralized storage, hlockchain valida tion, and cryptographic techniques to ensure the authenticity and integrity of academic ce,tificates. The process begins with certificate generation, where the administrator inputs student data through a structured dataset and generates digital certificates in a standardized format. These ce1tificates are then prepared for secure storage and verification within the decentralized framework.
Once generated, the certificates are uploaded to the Inter Planetary File System (IPFS), a distributed file system that stores data in a content-addressable manner. Each uploaded certificate is assigned a unique Content Identifier (CID), which serves as a permanent reference to the file. This approach en sures efficient storage while avoiding the high cost associated with storing large files direclly on the blockchain.
To guarantee data integrity, a cryptographic hash of the certificate is generated using the SMA-256 algorithm. The hash is computed based on the certificate content along with its associated CID, producing a unique fixed-length output that acts as a digital fingerprint of the certificate. Due to the deterministic and tamper-sensitive nature of the hashing pro cess, any modification in the certificate results in a completely
different hash value, thereby enabling reliable detection of data
alterations.
The generated hash is then securely stored on the blockchain through a smart contract deployed on the Polygon network. By leveraging Blockchain, the system ensures immutability, transparency, and decentralized access to verification data. The
smart contract maintains a mapping between certificate iden tifiers and their corresponding hash values, enabling efficient retrieval and validation.
During the verification phase, the system performs a re computation of the hash using the certificate provided by the verifier. This newly generated hash is compared with the hash stored on the blockchain to determine authenticity. If both values match, the certificate is cons.idered valid; otherwise, it is flagged as invalid. Additionally, the system checks the revocation status of the certificate to ensure that previously invalidated certificates are not accepted, thereby supporting full lifecycle management.
To enhance system security, an authentication layer based on email One-Time Password (OTP) verification is integrated into the workflow. Before accessing sensitive operations such as certificate retrieval or validation, users must authenticate themselves by entering a valid OTP sent to their registered
email address. This ensures secure identity verification and
prevents unauthorized access to the system.
A. Smart Contract Design and Implementation
The core functionality of the proposed system is imple mented using a smart contract deployed on the Polygon blockchain network, enabling secure, transparent, and auto mated managemenL of academic cerLificates. The smarL con
tract is developed using Solidity and deployed through the Hardhat framework, ensuring efficient development, testing, and deployment.
The smart contract is designed to maintain a structured representation of certificate data, including attributes such as certificate identifier, student identifier, IPFS CID, crypto graphic hash, and revocation status. These attributes are stored within a mapping structure that associates each ce1tificate 1D with its corresponding data, enabling constant-time access and efficient retrieval during verification.
Access control is enforced within the smart contract to ensure that only authorized administrators can perform critical operations such as ce1tificate issuance and revocation. This prevents unauthorized modifications and preserves the integrity of the system. The issuance function records certificate details on the blockchain, ensuring immutability, while the revocation
function allows administrators to invalidate certificates by
updating their status without altering historical data.
The verification function is designed to provide a secure and efficient mechanism for validating certificates. It retrieves the stored certificate data from the blockchain, verifies its existence, checks its revocation status, and performs a hash
comparison between the stored hash and the hash generated
from the input certificate. This entire process is executed in
a trustless environment, elimjnating the need for third-party intennediaries.
H. Cert(ficate Verifica1iun Alguri1hm
Algorithm I Smart Contract-Based Certificate Verification
Require: certificateld, inputCertificateFile
Ensure: verificationStatus E {VALID, INVALID, REVOKED}
Step I: Retrieve the certificate record using the given
certificate identifier
Step 2: Check whether the certificate exists
if ce,tificate record is empty then
return INVALID
end if
Step 3: Verify the revocation status of the certificate
if ce,tificate is revoked then
return REVOKED
end if
Step 4: Generate the hash of the input certificate using SHA-256
Step 5: Retrieve the stored hash value from the blockchain
Step 6: Compare the generated hash with the stored hash
if both hash values are equal then
return VALID
else
return INVALID
end if
1) Algorithm Explanation: The certificate verification al gorithm (Algorithm I) ensures authenticity, integrity, and non-repudiation through blockchain immutability and crypto graphic validation. The process retrieves certificate data from the blockchain and validates its existence. If the certificate is found, the system checks the revocation status to ensure it has not been invalidated.
Subsequently, a cryptographic hash is generated using SHA-
256 and compared with the stored blockchain hash. Both hashes are converted lo byte arrays and processed using kec cak256 for secure Solidity-compatible comparison. A match confirms authenticity and returns VAUD status, while any mismatch indicates tampering and returns INVALID. This ap proach provides high security while maintaining computational efficiency.
The certificate verification algorithm is designed to ensure authenticity, integrity, and non-repudiation through a combina tion of blockchain immutability and cryptographic validation techniques. The process begins by retrieving the ce1tificate data associated with the provided ce1tificate identifier from the blockchain. If no corresponding record is found, the certificate is immediately classified as invalid.
Once the certificate is retrieved, the system evaluates its revocation status. l.f the certificate has been marked as re voked by an authorized administrator, it is considered invalid regardless of any further validation steps. This mechanism
ensures proper lifecycle management and prevents the reuse of invalidated credentials.
Subsequently, the system generates a cryptographic hash of the input certificate using the SHA-256 algorithm. This hash is then compared with the original hash stored on the blockchain during the certificate issuance phase. Tu perform this comparison securely within the Solidity environment, both hash values are converted into byte arrays and processed using the keccak256 hashing function, which is native to Ethereum based systems and optimized for gas efficiency.
The final verification decision is based on the outcome of this comparison. A match between the computed hash and the stored hash confirms that the certificate is authentic and unaltered, resulting in a valid status. Conversely, any mismatch indicates potential tampering, leading to an invalid classification. This approach ensures a highly secure and reliable verification process while maintaining computational efficiency.
-
SYSTEM ARCHITECTURE
The proposed system architecture is designed as a multi layered framework that integrates frontend interfaces, backend services, blockchain infrastructure, and decentralized storage to enable secure and efficient academic certificate verification. Each layer in the architecture is responsible for specific functionalities, collectively ensuring seamless interaction, data integrity, and system scalability.
-
Fran/end Layer
The frontend layer is developed using modern web tech nologies such as React, providing an interactive and user friendly interface for administrators, students, and verifiers. This layer facilitates user interactions, including certificate generation, authentication, and verification processes. It acts as the entry point of the system, enabling users to communicate with backend services through secure APT calls.
-
Backend Layer
The backend layer is implemented using Spring Boot, which handles business logic, request processing, and communication between different components of the system. It acts as an intermediary between the frontend and other layers, ensuring secure data transmission and enforcing application-level val idation. The backend is responsible for processing certificate data, managing authentication workflows, generating hashes, and interacting with both the blockchain network and storage systems.
-
Blackchain Layer
The blockchain layer utilizes the Polygon network, which serves as a decentralized ledger for storing certificate hashes and verification data. By leveraging Blockchain, this layer en sures immutability, transparency, and resistance to tampering. Smart contracts deployed on the blockchain manage certificate issuance, revocation, and verification, enabling trustless and automated operations without reliance on centralized authori ties.
-
Storage Layer
The storage layer is divided into two components to opti mize performance and scalability. Certificate files are stored in the lnterPlanetary File System (IPFS), which provides decentralized and content-addressable storage. Each file stored in [PFS generates a unique Content Identifier (CCD), ensuring permanent and tamper-resistant access. In parallel, a relational database such as PostgreSQL is used to store metadata, in cluding student details, certificate references, and system logs. This hybrid storage approach balances efficiency, scalability, and data accessibility.
The overall workflow of the system follows a structured data flow across these layers. User requests initiated from the frontend are processed by the backend, which performs neces sary validations and operations. Certificate files are uploaded to IPFS for decentralized storage, while their corresponding cryptographic hashes are recorded on the blockchain to ensure integrity. Metadata related to ce1titicates and users is stored in the database for efficient retrieval.
During verification, the system retrieves data from these lay ers, recomputes the hash, and compares it with the blockchain record to determine authenticity. This integrated workflow ensures secure, real-time, and reliable certificate validation within a decentralized environment.
Vlll. EXPERIMENTAL SETUP
The proposed system is implemented using a combination of modern web technologies, blockchain infrastructure, and decentralized storage solutions to ensure efficiency, scalability, and security.
-
Blockchain lnfraslructure
The deployment of smart contracts is carried out on an Ethereum-compatible environment, specifically utilizing the Polygon Mumbai Testnet, which provides a cost-effective and scalable platform for blockchain-based applications. The choice of Polygon enables reduced transaction fees and faster confirmation times compared to traditional Ethereum mainnet deployments.
The smart contract development and deployment process is facilitated using the Hardhat framework, which provides a robust environment for compiling, testing, and deploying Solidity-based contracts. This framework supports efficient debugging and simulation of blockchain interactions, ensuring the reliability of contract execution.
-
Frontend and Backend Implementation
The frontend of the system is developed using React.js, which offers a dynamic and responsive user interface for administrators, students, and verifiers. [t enables seamless interaction with backend services and provides an intuitive platform for ce1tificate generation, authentication, and verifi cation.
The backend is implemented using Spring Boot with Java,
which handles application logic, API management, and com munication between different system components. It acts as a
Fig. I. System Architecture Diagmm
bridge between the frontend, blockchain network, and storage
layers, ensuring secure and efficient data processing.
-
Storage and Authentication
For decentralized file storage, the system utilizes the ln terPlanetary File System (IPFS) through the Pinata service, enabling reliable and persistent storage of certificate files. Each file stored in TPFS generates a unique content identifier, which is later used for verification purposes.
In addition, a PoslgreSQL database is employed to store metadata such as student information, certificate references, and system logs, ensuring efficient data retrieval and manage ment.
Authentication within the system is implemented using an email-based One-Time Password (ITTP) mechanism, which enhances security by providing multi-factor authentication. Furthermore, wallet integration is achieved using MetaMask, allowing secure interaction with the blockchain network for executing smart contract functions such as certificate issuance and verification.
-
Testing Environment
The system is evaluated in a controlled testing environment using simulated datasets that replicate real-world academic records. This setup enables comprehensive testing of system functionalities, including certificate generation, storage, au thentication, and verification, ensuring the robustness, accu racy, and performance of the proposed solution under realistic conditions.
-
RESULTS AND DISCUSSION
The proposed system was evaluated based on key perfor mance metrics, including security, efficiency, and usability, to
assess its effectiveness in comparison with traditional certifi cate verification methods. The experimental results demon strate that the integration of Blockchain, decentralized storage, and secure authentication mechanisms significantly enhances the overall system performance.
-
CertUicate Ver(fica1io11 Perfonnanc:e
The system achieves instant certificate verification by elim inating manual validation processes and enabling direct com parison with immutable blockchain records. Unlike conven tional systems, where verification requires institutional ap proval and time-consuming communication, the proposed ap proach provides real-time validation with minimal latency. Additionally, no instances of data tampering were observed during testing, confirming the robustness of the cryptographic integrity ensured through hashing and blockchain immutabil ity.
-
Authentication and Security
The incorporation of email-based One-Time Password (OTP) authentication strengthens access control by preventing unauthorized interactions with the system. This ensures that only authenticated users can access or verify certificates, thereby enhancing data security and user trust. Furthermore, the system supports efficient bulk certificate generation and processing, enabling institutions to handle large datasets with reduced administrative overhead.
-
Comparative Performance Analysis
A comparative performance analysis reveals that the pro posed system significanlly outperforms traditional methods across multiple parameters. Ve1ification time is drastically reduced due to automation and decentralized validation, while security is enhanced through cryptographic techniques and blockchain-based storage. Unlike traditional systems that lack tamper resistance, the proposed model ensures that any mod ification in certificate data is immediately detectable. Addi tionally, the authentication mechanism is considerably stronger due to the integration of OTP-based verification, as opposed to conventional password-based systems.
The performance comparison clearly indicates that the pro posed system provides lower verification time, higher secu rity, complete tamper resistance, and stronger authentication mechanisms, making it a more reliable and efficient solution for academic certificate validation.
-
-
GAS COST ANALYSIS
The etliciency of blockchain-based systems is largely deter mined by the gas consumption associated with smart contract execution. Gas represents the computational cost required to perform operations on blockchain networks such as Ethereum and Polygon. In the proposed system, gas consumption was analyzed for key operations, including contract deployment, certificate issuance, verification, and revocation.
The results indicate that contract deployment incurs the highest gas cost due to the initialization and storage of
Fig. 2. Performance Comparison: Traditional vs Proposed System
smart contract logic on the blockchain. In contrast, certificate issuance requires moderate gas consumption as it involves storing certificate hashes and associated metadata. Verification operations are comparatively lightweight, as they primarily in volve hash comparisons without extensive state mot.lifications. Similarly, revocation functions consume moderate gas as they update the status of existing records.
The gas cost can be mathematically expressed as:
Total Gas Cost = Gas Usect x Gas Price ( 1)
where the gas used represents the number of computational steps required for execution, and the gas price denotes the cost per unit gas measured in Gwei.
In the experimental setup, contract deployment required approximately 983,758 units of gas, with an average gas price of 25 Gwei, resulting in a total cost of approximately 0.025 MATTC. This demonstrates that deploying and operating the system on the Polygon network is significantly more cost effective compared to Ethereum mainnet. The results also highlight that verification operations are optimized for minimal gas consumption, making the system suitable for large-scale and frequent validation scenarios.
Overall, the analysis confirms that the proposed system achieves a balance between security and cost efficiency, en suring practical feasibility for real-world deployment.
A. Gas Consumption Breakdown
TABLE I
GAS CONSUMPTION BREAKDOWN FOR KEY OPERATIONS
Operation
Gas Used (Approx.)
Contract Deployment
~983,758
r.crtificai.e Issuance
~120,000
Cert.ificate Verification
~25,000
Revocation Function
~40,000
-
MATHEMATICAL MODEL OF CERTIFICATE VERIFICATION SYSTEM
The proposed system can be formally represented using cryptographic and functional models that define ce1tificate structure, hashing mechanisms, and verification logic. A cer tificate can be represented as a tuple consisting of its essential attributes:
proposed system ensures tamper-proof storage, transparent verification, and efficient data management.
The incorporation of cryptographic hashing techniques guar antees data integrity, while the implementation of email-based OTP authentication enhances system security by preventing unauthorized access. The system enables real-time certificate validation, significantly reducing verification time and elimi nating dependence on centralized authorities.
C = (ID, SID,CID, H, R)
(2)
Experimental results demonstrate that the proposed solution achieves superior performance in terms of security, efficiency,
where ID denotes the certificate identifier, SID represents the student identifier, CID corresponds to the IPFS content identifier, H is the cryptographic hash, and R indicates the revocation status.
The integrity of the certificate is ensured using the SHA-256 hashing function:
and reliability compared to conventional methods. Addition ally, the use of the Polygon network ensures cost-effective deployment and scalability, making the system suitable for real-world applications.
Future work may focus on integrating advanced iden tity management techniques, such as decentralized identity (DID) frameworks, and expanding interoperability with other
H = SHA256(Cn1o)
(3)
blockchain networks to further enhance system capabilities. Overall, the proposed system provides a robust, scalable, and
where Cme represents the certificate file. This function generates a unique fixed-length output that acts as a digital fingerprint of the certificate.
The blockchain storage mechanism can be modeled as a mapping function that associates certificate identifiers with their corresponding hash values:
B(ID) H (4)
During verification, the system evaluates the authenticity of
a certificate using the following function:
Valid if H1nput = Hblockchain /\ R = false
secure solution for digital credential verification in modern
academic ecosystems.
REFERENCES
[I] D. Shukla, P. Rajput, P. Jadhav, N. Jadhav, and J. Thakur, "Blockchain Based Academic Certificate Vcrificmion System," 2023.f2] S. H. D and S. N, "Secure Academic Certificate AuLhemication Using Blockchain and TPFS," 2025.
-
J.B. Moya, J. Ayoade, and M.A. Uddin, "ZKBAR-V: Blockchain-Based Academic Record Verification," 2025.
-
A. Grech and A. F. Camilleri, "Blockchain in Education," Joint Research Centre, European Commission, 2017.
-
M. Sharples and J. Domingue, "The Blockchain and Kudos: A Dis tributed System for Educational Record," 2016.
-
S. Nakamoto, "Bitcoin: A Peer-to-Peer Electronic Cash System," 2008.
-
V. Buterin, "Ethereum Whitepaper: A Next-Generation Smart Contract
V = Revoked if R = true
(5)
Platform," 2014.
{ Invalid otherwise
This model ensures that certificate validity is determined based on both hash integrity and revocation status.
From a security perspective, the probability of hash collision in SHA-256 is extremely low and can be expressed as:
P(collision) ""T256 (6)
This guarantees a negligible likelihood of two differ ent certificates producing the same hash, thereby ensuring strong cryptographic security. The integration of SHA-256, blockchain immutability, and decentralized storage through ln terPlanetary File System collectively strengthens the reliability and trustworthiness of the system.
-
-
CONCLUSION
As a component of this research study , we introduced a decentralized academic ce1tificate verification system that integrates blockchain technology, decentralized storage, and secure authentication mechanisms to address the I.imitations of traditional verification approaches. By leveraging the im mutability of Blockchain and the scalability of IPFS, the
-
G. Wood, "Ethereum: A Secure Decentralised Generalised Transaction Ledger," 2014.
-
M. Swan, Blockchain: 8/ueprilll for a New Economy, O'Reilly Media, 2015.
-
K. Christidis and M. Devetsikiotis, "Blockchains and Smart Contracts for the Internet of Things," IEEE Access, 2016.
-
N. Szabo, "Smart Contracts: Building Blocks for Digital Markets," 1996.
-
L. Luu et al., "Making Smart Contracts Smarter," ACM CCS, 2016.
-
M. Bartoletti and L. Pompianu, "An Empirical Analysis of Smart Contracts," 2017.
-
A. Mavridou and A. Laszka, "Tool Demonstration: FSolidM for Smart Contract Development," 2018.
-
S. Tikhomirov et al., "SmartCheck: Static Analysis of Ethereum Smart Contracts," 2018.
-
J. Benet, "TPFS – Content Addressed, Versioned, P2P File System," 2014.
-
Protocol Labs, "TPFS Documentation," 2023.
-
Q. Xia et al., "MeDShare: Trust-Less Medical Data Sharing Among Cloud Service Providers via Blockchain," IEEE Acee.\".\', 2017.
IJWGS, 2018.
[21] M. Turkanovic et al., "EduCTX: A Blockchain-Based Higher Education Credit Platfonn," IEEE Acee.\',\', 2018. [22j P. R. W. et al., "Blockchain for Secure Academic Credent.ial Verifica tion," 1£££, 2019. [23] R. Chen ct al., "A Blockchain-Bascd System for Academic Certificates,"IEEE, 2020.
[24] A. Alammary et al., "Blockchain-Based Applications in Education: A Systematic Review," Applied Sciences, 2019. [25) S. R. Pokhrel and J. Choi, "A Decentralized Approach for AcademicCredential Yerifil.'.ation," IEEE, 2020.
[26) W. Stallings, Cryptography and Network Security, Pearson, 2017. [27) B. Schneier, Applied C!)ptography, Wiley, 1996. [28) NIST, "SHA-256 Standard," 2015. [29) C. Paar and J. Pelz], U11dersta11di11g Ci)ptography, Springer, 2010. [30] D. Eastlake and P. Jones, "US Secure Hash Algorithm (SHA)," RFC 3174. [31) M. Bellare and P. Rogaway, "Entity Authentication and Key Distribution," 1993.
[321 lETF, "Time-Based One-Time Password Algorithm (TOTP)," RFC 6238. [33] D. M'Raihi et al., "HOTP: An HMAC-Based One-Time Password Algorithm," RFC 4226. [341 A. Das et al., "Two-Factor Authentication Using ITTP," IEEE, 2018. [35) S. Gupta et al., "Secure OTP Authentication System Using EmailVerification," 2021.
[36) ISO/IEC, "QR Code Standard," 2015. [37) T. Pavlidis et al., "Barcodes vs QR Codes," IEEE Computer, 2012. [381 Y. Liu et al., "QR Code-Based Authentication System," IEEE, 2019. [39) R. Want, "An Introduction to RFID Technology," IEEE PervasiveComputing, 2006.
r40l H. Kato and K. Tan, "QR Code Reader Technology," IEEE, 2007. [41) M. Crosby et al., "Blockchain Technology: Beyond Bitcoin," 2016. r421 K. Croman ct al., "On Scaling Decentralized Blockchains," 2016.
[43) S. Underwood, "Blockchain Beyond Bitcoin," IEEE IT Professional,2016.
r441 A. Dorri ct al., "Blockchain in loT: Challenges and Solutions," IEEE,
2017.
r451 X. Xu ct al., "A Taxonomy of Blockchain-Based Systems," IEEE, 2017. [46) Y. Zhang et al., "Hlul.'.h.:hain-Hast:t..l Uata Integrity YeriliL'.aLiun," IEEE,
2019.
[47] J. Sun et al., "Secure Data Sharing Using Blockchain," IEEE, 2020. [48) H. Lin and L. Liao, "Blockchain-Based Secure Authentication," IEEE,2017.
[49) S. Singh and N. Singh, "Blockchain: Future of Trust," IEEE, 2016. [50) A. Reyna et al., "On Blockchain and Its Integration with IoT," IEEE,2018.
