Federated custodian

A computer implemented method comprising:

• receiving, by a computer system and from a plurality of members of a federated blockchain on a network of computing devices, approvals for a transaction associated with an authentication capsule, wherein each of the plurality of members receives the authentication capsule and approves of the transaction based upon data in the authentication capsule, the authentication capsule including one or more authentication policies, encrypted credentials, and device and application metadata, the device and application metadata identifying a currency amount associated with the transaction or a frequency of previous transactions associated with a member of the plurality of members conducting the transaction, the one or more authentication policies identifying at least the plurality of members required to authenticate the transaction for the approvals and conditions for approving the transaction via the plurality of members of the federated blockchain on the network of computing devices based at least in part on the device and application metadata, a number of the plurality of members required to authenticate the transaction determined based on device data of a device conducting the transaction and a geographic location of the transaction, the device data including an IP address of the device and application data of the device;
• generating, via a first trusted execution environment implemented by the computer system, a first machine readable code in response to receiving the approvals for the transaction, the first machine readable code including encrypted information for the transaction and the approvals;
• transmitting, to an offline server, the first machine readable code generated in response to receiving approvals for the transaction;
• by presenting the first machine readable code to the offline server;
• and
• receiving, from the offline server, a second machine readable code generated by the offline server in a second trusted execution environment, the second machine readable code verifying completion of the transaction, wherein the offline server is configured for:
• receiving the first machine readable code;
• verifying proximity of the computer system to the offline server in response to receiving the first machine readable code;
• decrypting, via the second trusted execution environment implemented by the offline server, the encrypted information for the transaction and the approvals from the first machine readable code in response to verifying proximity of the computer system;
• requesting, via an associated hardware security module, for generation of a private key that corresponds to a public key for the transaction, the public key maintained by the plurality of members of the federated blockchain on the network of computing devices;
• encrypting, via the second trusted execution environment, the transaction using the private key from the hardware security module;
• and
• transmitting, to the computer system, the second machine readable code.

A computer-implemented method comprising:

• generating, by a computer system, a first audio machine readable code in response to receiving approvals for a transaction from a plurality of members of a federated blockchain on a network of computing devices, the first audio machine readable code including encrypted information for the transaction and the approval, the approvals associated with an authentication capsule, the authentication capsule including one or more authentication policies, encrypted credentials, and device and application metadata, the device and application metadata identifying a currency amount associated with the transaction or a frequency of previous transactions associated with a member of the plurality of members conducting the transaction, the one or more authentication policies identifying the plurality of members required to authenticate the transaction for the approvals and conditions for approving the transaction via the plurality of members of the federated blockchain on the network of computing devices based at least in part on the device and application metadata, a number of the plurality of members determined based on device data of a device conducting the transaction and a geographic location of the transaction, the device data including an IP address of the device and application data of the device, wherein each of the plurality of members receives the authentication capsule and approves of the transaction based upon data in the authentication capsule;
• and
• transmitting, to an offline server, the first audio machine readable code generated in response to receiving approvals for the transaction by presenting the first audio machine readable code to the offline server, wherein the offline server is configured for:
• receiving the first audio machine readable code;
• verifying proximity of the computer system to the offline server in response to receiving the first audio machine readable code;
• decrypting, via a trusted execution environment implemented by the offline server, the encrypted information for the transaction and the approvals from the first audio machine readable code in response to verifying proximity of the computer system;
• requesting, via an associated hardware security module, for generation of a private key that corresponds to a public key for the transaction, the public key maintained by the plurality of members of the federated blockchain on the network of computing devices;
• encrypting, via the trusted execution environment, the approvals of the transaction using the private key from the hardware security module;
• generating a second audio machine readable code that includes the approvals of the transaction;
• and
• transmitting, to the computer system, the second audio machine readable code.