Secure Certificate Verification Via Hybrid Aes-ecc Encryption, Face Biometrics & Blockchain

Abstract

Digital Certificate Management Faces Persistent Threats Including Forgery, Unauthorised Access, And Data Manipulation. Conventional Centralised Systems Are Vulnerable To Single-point Failures, Poor Scalability, And Weak Identity Verification. This Paper Proposes A Secure Certificate Verification Framework Integrating Three Complementary Layers: Facial Biometric Authentication Using The Grassmann Manifold Algorithm, Hybrid Encryption Combining AES-256 For Bulk File Protection And Elliptic Curve Cryptography (ECC) For Secure Key Management, And A Blockchain-based Decentralised Immutable Ledger For Certificate Storage. One-Time Password (OTP) Delivery And SHA-256 Hash Validation Reinforce Access Control At Every Stage. A Flask-Python Web Prototype Demonstrates End-to-end Certificate Issuance, Encrypted Storage, Biometric-gated Retrieval, And Third-party Verification. The System Eliminates Dependence On Centralised Infrastructure, Provides Tamper-proof Transparency, And Scales Efficiently Across Multiple Institutions.

Keywords