Security system and related methods
AssigneeEthopass, LLC
InventorsJoshua Freeman Adams, David Patrick Forster, Frank Barry Robertson
Life of this patent
Estimating the term…
Abstract
A method includes entropy hashing a hardened key; generating an asymmetric key pair from the hardened key; generating a keyspace chaincode from the hardened asymmetric key pair and the hardened key; and generating a verification key pair from the hardened asymmetric key pair. Related systems and methods are disclosed herein.
Claims22
A method, comprising:
- entropy hashing a hardened key;
- generating an asymmetric key pair from the hardened key;
- generating a keyspace chaincode from the hardened asymmetric key pair and the hardened key;
- and
- generating a verification key pair from the hardened asymmetric key pair.
The method of any preceding claim, wherein:
- entropy hashing a hardened key comprises entropy hashing a hardened seed key and a hardened recovery key.
A tangible, computer-readable medium comprising instructions which, when executed, carry out a method, the method comprising:
- entropy hashing a hardened key;
- generating an asymmetric key pair from the hardened key;
- generating a keyspace chaincode from the hardened asymmetric key pair and the hardened key;
- and
- generating a verification key pair from the hardened asymmetric key pair.
A method of generating a recovery key, comprising:
- entropy hashing a hardened key;
- generating an asymmetric key pair from the hardened key;
- generating a keyspace chaincode from the hardened asymmetric key pair and the hardened key;
- computing a non-collidable pseudo-random value;
- and
- passing the pseudo-random value to the keyspace chaincode to generate the recovery key.
A tangible, computer-readable medium comprising instructions which, when executed, carry out a method of generating a recovery key, the method comprising:
- entropy hashing a hardened key;
- generating an asymmetric key pair from the hardened key;
- generating a keyspace chaincode from the hardened asymmetric key pair and the hardened key;
- computing a non-collidable pseudo-random value;
- and
- passing the pseudo-random value to the keyspace chaincode to generate the recovery key.
A method, comprising:
- providing an asymmetric key pair having a public key and a private key from an elliptic curve;
- signing the public key with a first message authentication code;
- sending the public key and the first message authentication code to another party;
- receiving a first encrypted data package and a second message authentication code from the another party;
- using the private key, decrypting the first encrypted data package;
- receiving a symmetric encryption key and a nonce from the another party;
- sending a second encrypted data package and a third message authentication code to the another party, wherein the second encrypted data package comprises a public identifier.
A tangible, computer-readable medium comprising instructions which, when executed, carry out a method, the method comprising:
- providing an asymmetric key pair having a public key and a private key from an elliptic curve;
- signing the public key with a first message authentication code;
- sending the public key and the first message authentication code to another party;
- receiving a first encrypted data package and a second message authentication code from the another party;
- using the private key, decrypting the first encrypted data package;
- receiving a symmetric encryption key and a nonce from the another party;
- sending a second encrypted data package and a third message authentication code to the another party, wherein the second encrypted data package comprises a public identifier.
A method, comprising:
- receiving a public key and a first message authentication code from another party;
- verifying the first message authentication code;
- using the public key, generating a first encrypted data package having a symmetric encryption key and a first nonce state;
- adding a second message authentication code to the first encrypted data package;
- sending the first encrypted data package and the second message authentication code to the another party;
- receiving a second encrypted data package and a third message authentication code from the another party, wherein the second encrypted data package comprises a public identifier;
- using a second nonce state and the symmetric encryption key, decrypting the second encrypted data package.
A tangible, computer-readable medium comprising instructions which, when executed, carry out a method, the method comprising:
- receiving a public key and a first message authentication code from another party;
- verifying the first message authentication code;
- using the public key, generating a first encrypted data package having a symmetric encryption key and a first nonce state;
- adding a second message authentication code to the first encrypted data package;
- sending the first encrypted data package and the second message authentication code to the another party;
- receiving a second encrypted data package and a third message authentication code from the another party, wherein the second encrypted data package comprises a public identifier;
- using a second nonce state and the symmetric encryption key, decrypting the second encrypted data package.
A method of services identification, comprising:
- providing asymmetric key pair storage for services identification, having a public key stored on a service using a private key to authenticate against.
A tangible, computer-readable medium comprising instructions which, when executed, carry out a method of services identification, the method comprising:
- providing asymmetric key pair storage for services identification, having a public key stored on a service using a private key to authenticate against.
A web-based service, comprising:
- an asymmetric key pair storage for services identification, having a public key stored on the service and using a private key to authenticate against.
A tangible, computer-readable medium comprising instructions which, when executed, carry out a method of web-based service, comprising:
- providing an asymmetric key pair storage for services identification, having a public key stored on the service and using a private key to authenticate against.
Dependencies are inferred from the claim text.