Zero-knowledge proof (ZKP) verifies only the fact a service needs, instead of submitting full personal data. BBaton applies this principle to anonymous verification, delivering only the required result — such as whether a user is an adult.
PROVE WHAT MATTERS. REVEAL NOTHING ELSE.
A verification structure that confirms whether a condition is met without revealing identity. ZKP verifies only true/false and is designed to expose nothing else.
When a proof is checked, only a correct proof passes verification. The system is designed to attest user proofs reliably.
Proof values must not be forged or bypassed to deceive the verifier. Blockchain technology makes tampering and circumvention impossible.
The verifier learns nothing beyond whether the user holds a valid proof. Even BBaton is designed to be unable to know who the user is.
In production, the user’s personal data, the proof generated on the device, and the service interpreting the result must be separated. The point: your service receives only the result — never the raw data.
IDs and personal identifiers, including date of birth, remain on the user’s device or within user-controlled space. BBaton servers are designed to collect no personal data.
A request for a condition — such as adult status — goes to the user’s device, which returns a proof. BBaton verifies only whether that proof is valid.
The verified claim is delivered to the client. It contains no personal data — only whether the requested verification is true or false.
BBaton never touches personal data. The client sends a request, the device generates the required proof, and BBaton only verifies and returns the result.
At first enrollment, document data is read and the personal data plus proof material are generated — stored on the device only.
Original IDs never reach a central server or the blockchain. Everything that could identify the user stays in the user’s own hands.
When a client requests a condition, the device builds a proof from local data and BBaton verifies it. Original identity data is never transmitted.
BBaton is not an identity service. It does not tell you who a user is — it confirms whether a specific condition is met.
All that was needed was adult status — yet unnecessary personal data is exposed alongside it. Purpose and exposure do not match.
The service confirms only what its policy requires and never learns the underlying name, address, or birthdate. Purpose and data collected finally match.