# US 12,603,771 B1 · Distributed key generation and resharing for multi-device cryptocurrency wallets with tee-backed security

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,603,771 B1
- Document ID: US12603771B1
- Status: Granted
- Kind: B1
- Application number: 18/913,269
- Filed: 2024-10-11
- Published: 2026-04-16
- Granted: 2026-04-14
- Earliest claimed: 2024-10-11
- Assignees: Circle Internet Group, Inc.
- Applicants: Circle Internet Group, Inc.
- Inventors: Vipin Singh Sehrawat; Nolan Miranda
- Web page: https://patentgrep.com/patent/US12603771B1

## CPC

- H04L 9/0877: {using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM]}
- G06Q 20/065: {using e-cash}
- G06Q 20/3825: {Use of electronic signatures}
- G06Q 20/3829: {involving key management}
- H04L 9/085: {Secret sharing or secret splitting, e.g. threshold schemes}
- H04L 9/3247: {involving digital signatures}
- H04L 9/50: {using hash chains, e.g. blockchains or hash trees}
- G06F 21/00: Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F 21/60: Protecting data
- G06F 21/602: {Providing cryptographic facilities or services}
- G06Q 20/36: using electronic wallets or electronic money safes
- G06Q 20/3674: {involving authentication}
- H04L 9/08: Key distribution {or management, e.g. generation, sharing or updating, of cryptographic keys or passwords (network architectures or network communication protocols for supporting key management in a packet data network H04L63/06)}
- H04L 9/0861: {Generation of secret information including derivation or calculation of cryptographic keys or passwords}
- H04L 2209/56: Financial cryptography, e.g. electronic payment or e-cash
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

Implementations of the present disclosure are directed to star distributed key generation (SDKG) between computing devices for private key sharing in cryptographic networks, where a computing device is the center of a star graph of multiple computing devices and functions as a 2-out-of-3 DKG protocol that can is robust against multiple types of corruptions.

## Claims

### Claim 1

A computer-implemented method for star distributed key generation (SDKG) between computing devices for private key sharing in cryptographic networks, comprising:
generating, by a first computing device of a first entity, a first set of key share sub-parameters, a first sub-set of key share sub-parameters generated using a first function comprising a linear function, a second sub-set of key share sub-parameters being generated by sampling from a sampling space;
securely storing the second sub-set of key share sub-parameters by encrypting the second sub-set of key share sub-parameters using a first encryption key to provide an encrypted second sub-set of key share sub-parameters;
transmitting, by the first computing device and to a second computing device of a second entity, a first key share sub-parameter in the first sub-set of key share sub-parameters and a first set of verification parameters;
receiving, by the first computing device and from the second computing device, a parameter set comprising a key share sub-parameter generated by the second computing device using a second function and a second set of verification parameters;
determining, by the first computing device, a first private key share that enables the first computing device to sign transactions associated with the second computing device within the cryptographic network; and
determining, by the first computing device, a second private key share that enables the first computing device to sign transactions associated with a third computing device within the cryptographic network;
wherein the first computing device determines the second private key share in response to authenticating the third computing device, according to information that the second computing device shared with the third computing device.

### Claim 2 (depends on 1)

The computer-implemented method of claim 1, wherein the encrypted second sub-set of key share sub-parameters is stored within a first trusted execution environment (TEE) of the first computing device.

### Claim 3 (depends on 2)

The computer-implemented method of claim 2, wherein the first encryption key is an Advanced Encryption Standard (AES) encryption key that is generated by the first TEE of the first computing device.

### Claim 4 (depends on 1)

The computer-implemented method of claim 1, wherein neither the second sub-set of key share sub-parameters nor the encrypted second sub-set of key share sub-parameters is shared by the first computing device within any other computing device during execution of the SDKG.

### Claim 5 (depends on 1)

The computer-implemented method of claim 1, wherein the parameter set is received by the first computing device at least partly in response to the second computing device verifying verification parameters of the first set of verification parameters.

### Claim 6 (depends on 1)

The computer-implemented method of claim 1, wherein the second computing device securely stores the fourth sub-set of key share sub-parameters and at least one key share sub-parameter of the third sub-set of key share sub-parameters by encryption using a second encryption key to provide an encrypted sub-set of the second set of key share sub-parameters.

### Claim 7 (depends on 6)

The computer-implemented method of claim 6, wherein the second encryption key is an AES encryption key that is generated by a second TEE of the second computing device.

### Claim 8 (depends on 1)

The computer-implemented method of claim 1, wherein the cryptographic network comprises a cryptocurrency network and the first entity is a minting entity that mints tokens of a cryptocurrency within the cryptocurrency network.