Identity-Based Secure Tunnel #2022
Description
Open Grant Proposal: Auth-Gate: Identity-Based Secure Tunnel
Project Name: Auth-Gate: Identity-Based Secure Tunnel
Proposal Category: FVM, Developer and data tooling
Individual or Entity Name: Sodiq Oluwatoki
Proposer: Zeeknow
Project Repo(s) https://github.com/Zeeknow/Auth-Gate.git
Do you agree to open source all work you do on behalf of this RFP under the MIT/Apache-2 dual-license?: Yes.
Project Summary
Auth-Gate is a secure data transfer protocol designed to replace the "bearer-link" vulnerability of centralized clouds like Google Drive and iCloud. While centralized services allow anyone with a URL to access data, Auth-Gate uses the Filecoin Virtual Machine (FVM) as a decentralized gatekeeper.
By mapping Filecoin CIDs (Content Identifiers) to specific on-chain identities (wallet addresses), we create a "secure tunnel" where only the intended recipient can trigger the release of decryption keys. This project focuses on a high-quality mobile-first experience, enabling users to share and receive encrypted files via QR code handshakes and mobile wallet signatures.
Impact
The current Web3 storage landscape often lacks a simple "share with this person only" flow that is production-ready for non-technical users. Auth-Gate solves the privacy paradox of public CIDs by ensuring that even if a CID is discovered, the data remains an encrypted blob unless the requester satisfies the FVM smart contract's identity check.
Success looks like a seamless mobile web application where a user can upload a sensitive document, enter an ENS name, and trust that only that specific address can access the data. This increases the utility of the Filecoin network by transforming it from "cold storage" into an active, secure communication layer.
Outcomes
FVM Access Control Actor: A production-ready smart contract that manages permissions and key-fragment release logic.
Auth-Gate Mobile SDK: A lightweight JS library for client-side AES-256 encryption and FVM interaction.
Mainnet Web App: A mobile-optimized dApp supporting WalletConnect v2 for on-the-go secure transfers.
Data Onboarding
- Month Basic markdown files, first draft of README -- still WIP #1: 50GB (Testing/Beta)
- Month Adjust logo image size #3: 500GB (Early Adopters)
- Month Setup #6: 2TB+ (Post-launch Growth)
- Month RFP: Block explorer #12:
If question is not applicable, please disregard and proceed to "Adoption, Reach, and Growth Strategies"
Adoption, Reach, and Growth Strategies
Target Audience: Our project targets privacy-first professionals (legal, medical, and research) and Web3-native teams who handle sensitive data. This is a multi-billion dollar market currently locked into centralized "Zero-Knowledge" storage providers that still lack true on-chain verification.
Onboarding Strategy (The First 100 Users):
The First 10 (Beta): Recruit power users from the Filecoin Slack and Farcaster communities to test the "Mobile QR Handshake."
The Next 90 (Growth): Leverage social-identity gating. By allowing users to "Gate" a file to an ENS name or Farcaster handle, the recipient is naturally onboarded to the platform to retrieve their data, creating a built-in referral loop.
Reach & Growth:
QR-Handshake: We will showcase "Scan-to-Secure" at Web3 events (like EthCC or Filecoin meetups) to demonstrate the speed of mobile FVM transfers.
Partnerships: Onboard 2-3 DAOs as anchor users for internal document sharing, transitioning their workflows from Google Drive to a verifiable Filecoin "Data Room."
Maintenance and Upgrade Plans (Bonus)
Post-Grant: We will continue maintaining the core FVM contracts and responsive UI.
Future Upgrades: Integrate Threshold Cryptography (like Lit Protocol) for even more granular access control and social login options.
Development Roadmap
Milestone 1: FVM Protocol & Smart Contracts
Functionality: Deploy the core Gatekeeper contract (IN PROGRESS...).
Roles: Full-stack Developer (Lead).
Funding: NIL
Timeline: Three weeks
Milestone 2: Mobile-First SDK & QR Integration
Functionality: Integration of WalletConnect v2, client-side encryption, and "Scan-to-Authorize" QR features.
Roles: Full-stack Developer and A Mobile App Developer
Funding: $7,000
Timeline: Four weeks
Milestone 3: Mainnet Launch & Public Beta
Functionality: Deployment to Filecoin Mainnet, custom domain setup, and live demo of mobile-to-mobile secure transfer.
Roles: Full-stack Developer.
Funding: $3,000
Timeline: Four weeks
Total Budget Requested
| Milestone # | Description | Deliverables | Completion Date | Funding | |===|===|===|===|===| | 1 | FVM Logic | Testnet Contracts & Documentation | Three Weeks | $NIL | | 2 | Mobile UI/SDK | Mobile App Beta (Next.js/QR) | 4 Weeks | $7,000 | | 3 | Mainnet Launch | Live Production App | 4 Weeks | $3,000 |
Maintenance and Upgrade Plans
Post-grant, I intend to maintain the repository and integrate social identity protocols (Lens/Farcaster) to allow "Gate by Username."
Team
Team Members
Sodiq Oluwatoki
Team Member LinkedIn Profiles
https://www.linkedin.com/in/sodiq-oluwatoki-a87b482a7/
Team Website
https://my-portfolio-nine-psi-68.vercel.app/
Relevant Experience
Full-stack Web3 developer with experience in IPFS and React-based dApp development. Seeking to specialize in FVM to build privacy-preserving tooling.
Team code repositories
https://github.com/Zeeknow/Auth-Gate.git
Additional Information
I learned about the program through the FIL Builders community on Slack and by following the Filecoin Foundation's official blog updates regarding the FVM (Filecoin Virtual Machine) launch and developer ecosystem growth. And also on X
Best email address for discussing the grant agreement:
[email protected]
Additional Information to help evaluate the proposal:
Production Commitment: Unlike many prototypes, Auth-Gate is designed with a Mainnet-first mindset. We are committed to maintaining the service beyond the grant period to ensure it remains a reliable tool for the community.
UX-Focus: We believe the "Secret Sauce" of decentralized storage is usability. Our team is prioritizing a "Zero-Learning-Curve" interface where a user can scan a QR code and receive an encrypted file without ever seeing a CID or a complex command line.
Architecture Advantage: By using the FVM for access control rather than centralized servers, we are building one of the first truly "Self-Sovereign" file transfer tunnels on Filecoin.