NFT-Based Authentication Framework for Securing Enterprise Microservices in Big Data Environment

Saravanapavan Nasiketha – NSBM Green University

Umayanga Athapaththu – Plymouth University UK

Email: naji@nsbm.ac.lk/ imanthaumayanga512@gmail.com

Abstract: This study proposes a secure authentication framework based on Non-Fungible Tokens (NFTs) for enterprise microservices in big data environments. The objective was to overcome the limitations of traditional mechanisms such as JSON Web Tokens (JWTs), which lack built-in traceability, revocation, and protection against session-based attacks. Developed as a conceptual system design project, the framework was simulated using a custom private blockchain built in Go (Golang). NFTs were minted and transferred through smart contracts to act as temporary, verifiable access tokens. A custom hardware wallet, built on the ESP32-S3 microcontroller and programmed using the Arduino framework, was used to establish a physical barrier between the user and the system. This approach ensured that token ownership remained tamper-resistant and device-bound, ensuring that it remained secure. No human subjects were involved in this study; instead, the system was evaluated through functional test scenarios to assess authentication flow, session control, and token lifecycle management. Tools such as Docker and Redis were used to support simulation and deployment. Results indicated that the NFT-based system demonstrated improved resistance to token hijacking, session fixation, and replay attacks compared to JWT-based alternatives. Unlike conventional systems, it does not rely on static credentials and allows token revocation via on-chain burning and session-bound control. The study recommends future validation in real-world enterprise settings to assess scalability, fault tolerance, and real-time integration. The proposed framework offers a pathway toward decentralised, privacy-preserving authentication solutions suitable for secure and distributed environments.