Abstract: The present invention comprises a computer-implemented method for zero-trust authentication and session management utilizing the Bitcoin Lightning Network. A user requests access to the resource of a service provider and the user provides authentication material to securely access the service provider. The service provider initiates a Hold Invoice via a cryptographic function to generate a pre-image hash instructing the user to authorize release a specified amount of Bitcoin. Bitcoin is then moved into the Hold Invoice where it remains during an authentication attempt. A successful attempt issues an access token to log into an authenticated session. The Hold Invoice remains in place until the session ends, then the Hold Invoice is canceled and Bitcoin is released to the user. An unsuccessful attempt or a violations of terms of use, reveals the pre-image, denies the user access, and Bitcoin is transferred to the service provider as a settled payment transaction.

Abstract: The present invention comprises a computer-implemented zero-trust authentication method that utilizes the Bitcoin Lightning Network, which is the sole protocol offering immediate, immutable, and cost-free Bitcoin settlement. A user requests access to the resource of a service provider and the user provides authentication material necessary to securely access the service provider. The service provider initiates a Hold Invoice via a cryptographic function to generate a pre-image hash, instructing the user to authorize release of Bitcoin in an amount stipulated by the Hold Invoice. Bitcoin is held in the Hold Invoice until an authentication attempt is either successful or unsuccessful. If successful, the user is issued an access token to login into the resource, the Hold Invoice is canceled and Bitcoin is released to the user. If unsuccessful, the pre-image is revealed, the user is denied access, and Bitcoin is transferred to the service provider as a settled payment transaction.