# US 12,603,792 B2 · Systems and methods for enforcing compliance or private transactions > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,603,792 B2 - Document ID: US12603792B2 - Status: Granted - Kind: B2 - Application number: 18/517,911 - Filed: 2023-11-22 - Published: 2024-05-30 - Granted: 2026-04-14 - Earliest claimed: 2022-11-28 - Assignees: Sealance Corp. - Applicants: Sealance Corp. - Inventors: Matthew Green - Web page: https://patentgrep.com/patent/US12603792B2 ## CPC - H04L 9/50: {using hash chains, e.g. blockchains or hash trees} - H04L 63/102: {Entity profiles} - H04L 9/3218: {using proof of knowledge, e.g. Fiat-Shamir, GQ, Schnorr, ornon-interactive zero-knowledge proofs} - H04L 9/3221: {interactive zero-knowledge proofs} - H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD} - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A computer-based system, method, and computer program product for permissioning private transactions on a public network. The system and method including a blockchain privacy network having a computer processor configured to execute a policy enforcement computing system by using at least one compliance zero-knowledge proof, enforcing compliance of a private transaction on a blockchain network with a predefined policy. The system and method controlling an identity by issuing a decentralized private credential (DPC) to a verified user, integrating an identity assertion into the decentralized private credential (DPC), the identity assertion associated with the verified user, and verifying the identity assertion by using a verification zero-knowledge proof. ## Claims ### Claim 1 A computer-based system on a public blockchain network, the computer-based system comprising: a public blockchain network configured to enable permissioning of private transactions, the public blockchain network including: a blockchain privacy network having multiple nodes, at least one of the multiple nodes of the blockchain privacy network having a computer processor configured to execute a policy enforcement computing system, the policy enforcement computing system configured to: using at least one compliance zero-knowledge proof, enforce compliance of at least one private transaction with at least one predefined policy, the private transaction occurring on the public blockchain network; control at least one user identity by issuing a decentralized private credential (DPC) to a verified user; integrate at least one identity assertion into the decentralized private credential (DPC), the at least one identity assertion associated with the verified user; and using at least one verification zero-knowledge proof, verify the at least one identity assertion; wherein the policy enforcement computing system is on the blockchain privacy network and is configured to manage transactions by verifying that the transaction complies with at least one programmable policy that determines whether the transaction is compliant; wherein the blockchain privacy network is configured to facilitate policy enforcement using zero-knowledge by combining the policy enforcement computing system with a transaction privacy system; and wherein the policy enforcement computing system is configured to use dedicated domain-specific language for specifying policy requirements. ### Claim 2 (depends on 1) The computer-based system of claim 1, wherein the policy enforcement computing system is implemented on a compliance layer, said compliance layer implemented on at least one of a trusted platform module, a hardware security module, an oracle, and a virtual machine. ### Claim 3 (depends on 2) The computer-based system of claim 2, wherein the policy enforcement computing system enforces at least one predefined policy, the at least one policy of the policy enforcement computing system is configured to enable a user to selectively reveal information to another party on the blockchain. ### Claim 4 (depends on 1) The computer-based system of claim 1, further configured to allow for identity discovery of parties on the blockchain, the computer-based system being further configured to: establish an identity on the network by constructing a derived personal identity verification credential; identify and remove duplicate derived personal identity verification credentials; verify derived personal identity verification credentials; and discover identities of parties on the blockchain based on their verified derived personal identity verification credentials. ### Claim 5 (depends on 2) The computer-based system of claim 2, wherein the policy enforcement computing system is on the blockchain privacy network and is further configured to use an optimistic rollup-based approach for computing a large number of transactions. ### Claim 6 (depends on 4) The computer-based system of claim 4, wherein the policy enforcement computing system is located on the blockchain privacy network and manages user identities using decentralized private credentials. ### Claim 7 (depends on 4) The computer-based system of claim 4, wherein the policy enforcement computing system is on the blockchain privacy network and is configured to operate a distributed user discoverability network in combination with identity management; the policy enforcement computing system is further configured to record each identity using a decentralized private credential, said decentralized private credential comprising at least one of: proof-of-ownership of specific wallets, verified ownership of an email address, verified ownership of a phone number, and full government-ID-verified know-your-customer assertions made by trusted identity providers. ### Claim 8 (depends on 1) The computer-based system of claim 1, wherein the policy enforcement computing system is further configured to process information in a certificate or a transaction in a manner reconfigurable by a user. ### Claim 9 (depends on 1) The computer-based system of claim 1, wherein the policy enforcement computing system is on the blockchain privacy network, and the blockchain privacy network comprises a programmable zero-knowledge smart contract. ### Claim 10 (depends on 1) The computer-based system of claim 1, wherein the policy computing enforcement system is on the blockchain privacy network, the blockchain privacy network configured to allow individual senders and recipients to opt into policy enforcement. ### Claim 11 (depends on 1) The computer-based system of claim 1, wherein the computer processor is a secure cryptoprocessor implemented with a CPU/Zero Knowledge Processing Unit (ZPU) having an embedded optimistic Zero Knowledge verifier based hardware accelerator. ### Claim 12 (depends on 1) The computer-based system of claim 1, wherein the blockchain privacy network is further configured to manage user identity by recoding each user identity using Decentralized Private Credentials (DPC) to create an accretive and nontransferable record binding to a single user, the Decentralized Private Credentials (DPC) including a set of assertions about the user including at least one proofs-of-ownership of specific wallets on one or more computing networks, verified ownership of an email address, a phone number attested to by a validator committee, and full government-ID-verified know your wallet (KYC) assertions made by trusted identity providers; wherein the assertions are stored on-chain in an encrypted format. ### Claim 13 (depends on 1) The system of claim 1 wherein one or more of the plurality of servers include a hybrid crypto processor unit with an embedded encapsulated privacy computer system having a Zero Knowledge Processing Unit (ZPU) based hardware accelerator optimized to improve packet processing for permissioning of private transactions on the blockchain privacy network. ### Claim 14 A computer-based system on a public blockchain network, the computer-based system comprising: a public blockchain network configured to enable permissioning of private transactions, the public blockchain network including: a blockchain privacy network having multiple nodes, at least one of the multiple nodes of the blockchain privacy network having a computer processor configured to execute a policy enforcement computing system, the policy enforcement computing system configured to: using at least one compliance zero-knowledge proof, enforce compliance of at least one private transaction with at least one predefined policy, the private transaction occurring on the public blockchain network; control at least one user identity by issuing a decentralized private credential (DPC) to a verified user; integrate at least one identity assertion into the decentralized private credential (DPC), the at least one identity assertion associated with the verified user; and using at least one verification zero-knowledge proof, verify the at least one identity assertion; wherein the at least one transaction is organized into a sealed pool, where a pool-wide policy is enforced by ensuring that each user has a decentralized private credential (DPC) identity of a sufficient grade for transacting in the sealed pool. ### Claim 15 (depends on 14) The computer-based system of claim 14, wherein the policy enforcement computing system is on the blockchain privacy network and is configured to manage transactions by verifying that at least one of the transactions complies with at least one programmable policy that determines whether the transaction is compliant. ### Claim 16 (depends on 15) The computer-based system of claim 15, wherein the policy enforcement computing system is on the blockchain privacy network, the blockchain privacy network configured to facilitate policy enforcement using zero-knowledge by combining the policy enforcement computing system with a transaction privacy system; and the policy enforcement computing system is further configured to use dedicated domain-specific language for specifying policy requirements. ### Claim 17 (depends on 14) The computer-based system of claim 14, wherein a transaction is organized into a sealed pool and a pool-wide policy is enforced by placing limitations on transaction amounts according to identity quality. ### Claim 18 (depends on 14) The computer-based system of claim 14, wherein a transaction is organized into a sealed pool and a pool-wide policy is enforced by enabling investigatory capability as a user opt-in. ### Claim 19 A computer-based method on a public blockchain network, the computer-based method comprising: configuring a public blockchain network to enable permissioning of private transactions, the public blockchain network including: configuring a blockchain privacy network having multiple nodes, configuring at least one of the multiple nodes of the blockchain privacy network having a computer processor to execute a policy enforcement computing system, configuring the policy enforcement computing system to: using at least one compliance zero-knowledge proof, enforce compliance of at least one private transaction with at least one predefined policy, the private transaction occurring on the public blockchain network; control at least one user identity by issuing a decentralized private credential (DPC) to a verified user; integrate at least one identity assertion into the decentralized private credential (DPC), the at least one identity assertion associated with the verified user; and using at least one verification zero-knowledge proof, verify the at least one identity assertion; wherein the at least one transaction configured into a sealed pool, where a pool-wide policy is enforced by ensuring that each user has a decentralized private credential (DPC) identity of a sufficient grade for transacting in the sealed pool. ### Claim 20 (depends on 19) The computer-based method of claim 19, wherein the blockchain privacy network is configured to enable a user to verify the assertions using a zero-knowledge succinct non-interactive argument of knowledge (zkSNARK) proof; and wherein the blockchain privacy network is further configured to require know your customer (KYC)/identity attestations to process transactions, enabling interaction between permissioned applications and open decentralized assets/applications. ### Claim 21 (depends on 20) The computer-based method of claim 20, wherein the blockchain privacy network includes a policy enforcement computing system configured to enforce privacy policies using a zero-knowledge proof, such that privacy policy enforcement is executed without the policy enforcement computing system revealing private information related to the transaction including an amount, recipient, and sender data related to the transaction. ### Claim 22 (depends on 20) The computer-based method of claim 20, wherein the blockchain privacy network is be configured to implement transaction privacy using an unspent transaction output (UTXO)-based payment privacy layer derived from zero-knowledge succinct non-interactive argument of knowledge (zkSNARK) proofs, this layer focusing primarily on the transfer of value between accounts, enabling users to access (nonprivate) decentralized finance (DeFi) systems using private transfers of funds. ### Claim 23 A computer-based method in a public blockchain network, the computer-based method comprising: permissioning private transactions by applications on a public blockchain by: using a blockchain privacy network having multiple nodes, at least one of the multiple nodes of the blockchain privacy network having a secure cryptoprocessor implemented as a dedicated microprocessor configured to execute a policy enforcement computing system; using one or more compliance zero-knowledge proof enforce compliance of at least one private transaction with at least predefined policy, the private transaction occurring on the public blockchain network; controlling at least one user identity by issuing a decentralized private credential (DPC) to a verified user; integrating at least one identity assertion into the decentralized private credential (DPC), the at least one identity assertion associated with the verified user; and verifying the at least one identity assertions; wherein the policy enforcement computing system is on the blockchain privacy network and is configured to manage transactions by computationally verifying that the transaction complies with at least one programmable policy that determines whether the transaction is compliant; wherein the blockchain privacy network is configured to facilitate policy enforcement using zero-knowledge by combining the policy enforcement computing system with a transaction privacy system; and the policy enforcement computing system is further configured to use dedicated domain-specific language for specifying policy requirements. ### Claim 24 (depends on 23) The computer-based method of claim 23, wherein the policy enforcement computing system is configured to be implemented on a compliance layer, said compliance layer configured on at least one of a trusted platform module, a hardware security module, an oracle, and a virtual machine. ### Claim 25 (depends on 24) The computer-based method of claim 24, wherein the policy enforcement computing system is configured to enforce at least one predefined policy, the at least one policy of the policy enforcement computing system is configured to enable a user to selectively reveal information to another party on the blockchain. ### Claim 26 (depends on 24) The computer-based method of claim 24, wherein the policy enforcement computing system is on the blockchain privacy network and is further configured to use an optimistic rollup-based approach for computing a large number of transactions. ### Claim 27 (depends on 23) The computer-based method of claim 23, further configured to allow for identity discovery of parties on the blockchain, the computer-based method further configured to: establish an identity on the network by constructing a derived personal identity verification credential; identify and remove duplicate derived personal identity verification credentials; verify derived personal identity verification credentials; and discover identities of parties on the blockchain based on their verified derived personal identity verification credentials. ### Claim 28 (depends on 27) The computer-based method of claim 27, wherein the policy enforcement computing system is located on the blockchain privacy network and manages user identities using decentralized private credentials. ### Claim 29 (depends on 27) The computer-based method of claim 27, wherein the policy enforcement computing system is on the blockchain privacy network and is configured to operate a distributed user discoverability network in combination with identity management; and configuring the policy enforcement computing system to record each identity using a decentralized private credential, said decentralized private credential comprising at least one of: proof-of-ownership of specific wallets, verified ownership of an email address, verified ownership of a phone number, and full government-ID-verified know-your-customer assertions made by trusted identity providers. ### Claim 30 (depends on 23) The computer-based method of claim 23, wherein the policy enforcement computing system is further configured to process information in a certificate or a transaction in a manner reconfigurable by a user. ### Claim 31 (depends on 14) The computer-based system of claim 14, wherein the policy enforcement computing system is on the blockchain privacy network and is configured to manage transactions by computationally verifying that the transaction complies with at least one programmable policy that determines whether the transaction is compliant. ### Claim 32 (depends on 23) The computer-based method of claim 23, wherein the policy enforcement computing system is on the blockchain privacy network, and the blockchain privacy network comprises a programmable zero-knowledge smart contract. ### Claim 33 (depends on 23) The computer-based method of claim 23, wherein the policy enforcement computing system is on the blockchain privacy network, the blockchain privacy network configured to allow individual senders and recipients to opt into policy enforcement. ### Claim 34 (depends on 23) The computer-based method of claim 23, wherein the policy enforcement computing system is on the blockchain privacy network, the blockchain privacy network configured to facilitate policy enforcement using zero-knowledge by combining the policy enforcement computing system with the transaction privacy method; and configuring the blockchain privacy network to use dedicated domain-specific language for specifying policy requirements. ### Claim 35 (depends on 23) The computer-based method of claim 23, wherein a transaction is organized into a sealed pool, where a pool-wide policy is enforced by ensuring that each user has a Decentralized Private Credentials (DPC) identity of a sufficient grade for transacting in the sealed pool. ### Claim 36 (depends on 35) The computer-based method of claim 35, wherein a transaction is organized into a sealed pool and a pool-wide policy is enforced by placing limitations on transaction amounts according to identity quality. ### Claim 37 (depends on 35) The computer-based method of claim 35, wherein a transaction is organized into a sealed pool and a pool-wide policy is enforced by enabling investigatory capability as a user opt-in. ### Claim 38 (depends on 23) The computer-based method of claim 23, wherein the computer processor is a secure cryptoprocessor implemented with a CPU/Zero Knowledge Processing Unit (ZPU) having an embedded optimistic Zero Knowledge verifier based hardware accelerator. ### Claim 39 (depends on 23) The computer-based method of claim 23, wherein the blockchain privacy network is further configured to manage user identity by recoding each user identity using Decentralized Private Credentials (DPC) to create an accretive and nontransferable record binding to a single user, the Decentralized Private Credentials (DPC) including a set of assertions about the user including at least one proofs-of-ownership of specific wallets on one or more computing networks, verified ownership of an email address, a phone number attested to by a validator committee, and full government-ID-verified know your wallet (KYC) assertions made by trusted identity providers; wherein the assertions are stored on-chain in an encrypted format. ### Claim 40 (depends on 23) The computer-based method of claim 23, further enabling a user to verify the assertions using a zero-knowledge succinct non-interactive argument of knowledge (zkSNARK) proof; configuring the blockchain privacy network to provide a cross-network method for building and proving identity, which is used on external decentralized or centralized method. ### Claim 41 (depends on 40) The computer-based method of claim 40, wherein the blockchain privacy network is further configured to require know your customer (KYC)/identity attestations to process transactions, enabling interaction between permissioned applications and open decentralized assets/applications. ### Claim 42 (depends on 40) The computer-based method of claim 40, wherein the blockchain privacy network includes a policy enforcement system configured to enforce privacy policies using a zero-knowledge proof, such that privacy policy enforcement is executed without the policy enforcement computing system revealing private information related to the transaction including an amount, recipient, and sender data related to the transaction. ### Claim 43 (depends on 40) The computer-based method of claim 40, wherein the blockchain privacy network is configured to implement transaction privacy using an unspent transaction output (UTXO)-based payment privacy layer derived from zero-knowledge succinct non-interactive argument of knowledge (zkSNARK) proofs, this layer focusing primarily on the transfer of value between accounts, enabling users to access (nonprivate) decentralized finance (DeFi) methods using private transfers of funds.