Notes

• This paper designs a binding scenario for authentication policies, making the circuit invisible but immutable, allowing users to verify their own private policy.
• Using interpolation to generate an equivalent QAP, the verification logic remains unchanged but the structure is hidden.
• zkAt modifies the Groth16 setup, making the vk independent of the circuit, hiding the policy.
• vk and π do not leak policy information, achieving policy privacy.
• zkAt policies are fixed, updates require zkAt+.
• zkAt+ uses recursive SNARKs to support privacy policy updates.

• 本文设计了一个认证策略绑定场景，使电路对外不可见但不可变，便于验证用户私下自设条件。
• 利用插值生成等价 QAP，验证逻辑不变，但结构不可见。
• zkAt 修改 Groth16 setup，使 vk 与电路无关，隐藏策略。
• vk 和 π 不泄露策略信息，实现策略隐私。
• zkAt 策略固定，更新需用 zkAt+。
• zkAt+ 用递归 SNARK 支持隐私策略更新。