Reissuing obligations to preserve privacy
AssigneeR3 Ltd.
InventorRichard G. Brown
Life of this patent
Estimating the term…
Abstract
A system is provided for reissuing obligations whose ownership is recorded in a distributed ledger to preserve the identity of prior owners of the obligations. The system accesses a target transaction in which an issuer has a target obligation to a target owner specified in the target transaction. The target transaction has one or more ancestor transactions that each specify an owner. The system retires the target transaction so that the issuer no longer has the target obligation. The system then receives an indication that the issuer created a reissue transaction in which the issuer has a reissued obligation to the target owner that is specified in the reissue transaction. The reissue transaction does not have any ancestor transactions.
Claims26
A method performed by one or more computing systems for creating a confidential identity for a first entity, the method comprising:
- generating a first confidential public/private key pair that includes a first confidential public key and a first confidential private key;
- generating a first confidential identity certificate, the first confidential identity certificate including the first confidential public key and a first well-known name of the first entity;
- and
- signing the first confidential identity certificate with a first well-known private key of the first entity, a first well-known public key and the first well-known private key composing a first well-known public/private key pair.
A method performed by one or more computing system for verifying a confidential identity of a first entity, the method comprising:
- accessing a signed first confidential identity certificate of the first entity that includes a first confidential public key of the first entity and a first well-known name of the first entity and that is signed using a first well-known private key of the first entity, the first confidential public key and a first confidential private key composing a first confidential public/private key;
- a first well-known public key and the first well-known private key composing a first well-known public/private key pair;
- and
- verifying using the first well-known public key that the signed first confidential identity certificate was signed using the first well-known private key.
One or more computing systems for creating proof of a confidential identity of a first entity, the one or more computing system comprising:
- one or more computer-readable storage mediums for storing computer-executable instructions for controlling the one or more computing systems to:
- access a first confidential public/private key pair that includes a first confidential public key and a first confidential private key;
- and
- sign the first confidential public key with a first well-known private key of the first entity, a first well-known public key and the first well-known private key composing a first well-known public/private key pair;
- and
- one or more processors for executing the computer-executable instructions stored in the one or more computer-readable storage mediums.
One or more computing systems for verifying an identity of a first entity, the one or more computing system comprising:
- one or more computer-readable storage mediums for storing computer-executable instructions for controlling the one or more computing systems to:
- access a signed first confidential public key of the first entity and that is signed using a first well-known private key of the first entity, the first confidential public key and a first confidential private key composing a first confidential public/private key, a first well-known public key and the first well-known private key composing a first well-known public/private key pair;
- verify using the first well-known public key that the signed first confidential public key was signed using the first well-known private key;
- and
- access signed data that is data that is signed using the first confidential private key;
- and
- verify that the first entity signed the data using the signed first confidential public key;
- and
- one or more processors for executing the computer-executable instructions stored in the one or more computer-readable storage mediums.
Dependencies are inferred from the claim text.