System and a method for signing transactions using air-gapped private keys
AssigneeFundacja “Blockchain Development Foundation”
InventorKamil Rafal GANCARZ
Life of this patent
Estimating the term…
Abstract
A system for signing transactions. The system includes a first module with a communication interface to a public network; and a controller to handle a transaction with a Blockchain network or a transaction server accessible at the public network. The system also includes a second module with a random number generator; and a secure controller to generate seed words and private keys. The system further includes a bridge module with a controller; and a switch to selectively connect the data interface of the bridge module to either the data interface of the first module or the data interface of the second module such that the data interface of the first module is never connected with the data interface of the second module.
Claims13
A system for signing transactions, the system comprising:
- a first module comprising:
- a communication interface to a public network;
- a controller configured to handle a transaction with a Blockchain network or a transaction server accessible at the public network;
- and
- a data interface for communicating with the controller;
- a second module comprising:
- a random number generator for generating random sequences;
- a secure controller configured to generate seed words and private keys based on the random sequences generated by the random number generator and to store the seed words and the private keys and to sign the transaction request by generating a signed transaction;
- and
- a data interface for communicating with the secure controller;
- a bridge module comprising:
- a controller;
- a data interface for communicating with the controller;
- and
- a switch configured to selectively connect the data interface of the bridge module to either the data interface of the first module or the data interface of the second module such that the data interface of the first module is never connected with the data interface of the second module;
- wherein the controller is configured to receive a transaction request from the first module, pass the transaction request to the second module, receive the signed transaction from the second module and pass the signed transaction to the first module.
A method for signing transactions using a system for signing transactions, the system comprising:
- a first module comprising:
- a communication interface to a public network;
- a controller configured to handle a transaction with a Blockchain network or a transaction server accessible at the public network;
- and
- a data interface for communicating with the controller;
- a second module comprising:
- a random number generator for generating random sequences;
- a secure controller configured to generate seed words and private keys based on the random sequences generated by the random number generator and to store the seed words and the private keys and to sign the transaction request by generating a signed transaction;
- and
- a data interface for communicating with the secure controller;
- a bridge module comprising:
- a controller;
- a data interface for communicating with the controller;
- and
- a switch configured to selectively connect the data interface of the bridge module to either the data interface of the first module or the data interface of the second module such that the data interface of the first module is never connected with the data interface of the second module;
- wherein the controller is configured to receive a transaction request from the first module, pass the transaction request to the second module, receive the signed transaction from the second module and pass the signed transaction to the first module;
- the method comprising the steps of:
- connecting the first module to the public network;
- setting up transaction details;
- receiving acceptance that said transaction is to be authorized;
- sending the transaction request to the bridge module;
- disconnecting the first module from the bridge module;
- connecting the bridge module to the second module;
- sending the transaction request from the bridge module to the second module;
- authorizing the transaction via the second module;
- signing the transaction with the private key stored in the second module to generate the signed transaction;
- sending the signed transaction from the second module to the bridge module;
- disconnecting the second module from the bridge module;
- connecting the first module to the bridge module;
- sending the signed transaction from the bridge module to the first module;
- and
- sending the signed transaction from the first module to the Blockchain network or to the transaction server.
Dependencies are inferred from the claim text.