Back to results
US 12,088,568 B2Granted
Systems and methods for secure key service
AssigneeBlockchains, Inc.
InventorsAlex Oberhauser, Andrew John Trainor
Life of this patent
Estimating the term…
Abstract
Systems and methods for providing a secure custodial service for managing a digital asset. The method comprises receiving a first value for use in decrypting at least one attribute value, receiving the at least one attribute value in encrypted form, and storing, on at least one storage device, the first value and the at least one attributed value in encrypted form, wherein at least one attribute value has been encrypted using a second value and a public key associated with secure hardware, and the second value corresponds to the first value.
Claims19
A system comprising:
- at least one computer processor;
- and
- at least one computer-readable medium having encoded thereon instructions which, when executed, cause the at least one computer processor to perform a method comprising acts of:
- receiving, from a first entity, one or more attribute values of a second entity different from the first entity;
- obtaining one or more attribute attestations, wherein the one or more attribute attestations correspond, respectively, to the one or more attribute values of the second entity;
- checking the one or more attribute values received from the first entity against the one or more attribute attestations;
- using at least one attribute value of the one or more attribute values to check one or more transfer rules;
- and
- in response to establishing compliance with the one or more transfer rules, authorizing a transfer of one or more digital assets, wherein:
- the first entity is associated with a first cryptographic key of an N-out-of-M threshold cryptographic scheme,
- authorizing the transfer of one or more digital assets comprises using one or more second cryptographic keys of the N-out-of-M threshold cryptographic scheme to sign a data structure storing information regarding the transfer, the one or more second cryptographic keys being different from the first cryptographic key,
- each of the one or more second cryptographic keys is associated with a respective key service, and
- the transfer is further authorized using the first cryptographic key associated with the first entity.
10 more elements
A computer-implemented method, comprising acts of:
- receiving, from a first entity, one or more attribute values of a second entity different from the first entity;
- obtaining one or more attribute attestations, wherein the one or more attribute attestations correspond, respectively, to the one or more attribute values of the second entity;
- checking, using at least one computer processor, the one or more attribute values received from the first entity against the one or more attribute attestations;
- using at least one attribute value of the one or more attribute values to check one or more transfer rules;
- and
- in response to establishing compliance with the one or more transfer rules, authorizing a transfer of one or more digital assets, wherein:
- the first entity is associated with a first cryptographic key of an N-out-of-M threshold cryptography scheme,
- authorizing the transfer of one or more digital assets comprises using one or more second cryptographic keys of the N-out-of-M threshold cryptography scheme to sign a data structure storing information regarding the transfer, the one or more second cryptographic keys being different from the first cryptographic key,
- each of the one or more second cryptographic keys is associated with a respective key service, and
- the transfer is further authorized using the first cryptographic key associated with the first entity.
7 more elements
A non-transitory computer-readable medium having encoded thereon instructions which, when executed, cause at least one computer processor to perform a method comprising acts of:
- receiving, from a first entity, one or more attribute values of a second entity different from the first entity;
- obtaining one or more attribute attestations, wherein the one or more attribute attestations correspond, respectively, to the one or more attribute values of the second entity;
- checking the one or more attribute values received from the first entity against the one or more attribute attestations;
- using at least one attribute value of the one or more attribute values to check one or more transfer rules;
- and
- in response to establishing compliance with the one or more transfer rules, authorizing a transfer of one or more digital assets, wherein:
- the first entity is associated with a first cryptographic key of an N-out-of-M threshold cryptography scheme,
- authorizing the transfer of one or more digital assets comprises using one or more second cryptographic keys of the N-out-of-M threshold cryptography scheme to sign a data structure storing information regarding the transfer, the one or more second cryptographic keys being different from the first cryptographic key,
- each of the one or more second cryptographic keys is associated with a respective key service, and
- the transfer is further authorized using the first cryptographic key associated with the first entity.
7 more elements
Dependencies are inferred from the claim text.