Risk mitigation for a cryptoasset custodial system using a hardware security key

A method comprising:

• receiving, by a hardware security module of a cryptoasset custodial system, a requested operation description including data describing a cryptoasset transaction and an organization that owns a cryptoasset;
• determining, by the hardware security module, at least one reviewing entity required for approval of the cryptoasset transaction based at least in part on a policy map for the organization;
• transmitting, by a server computer of the cryptoasset custodial system and to a computing device of the at least one reviewing entity, an approval request for the cryptoasset transaction;
• authenticating, by a risk analysis module of the cryptoasset custodial system, the at least one reviewing entity based on a hardware security token security key received from the computing device of the at least one reviewing entity in response to the approval request, the hardware security token security key associated with a hardware security token of the at least one reviewing entity and indicating an approval of the cryptoasset transaction in accordance with risk parameters defined in the policy map;
• responsive to the authentication of the at least one reviewing entity, signing, by the hardware security module, the cryptoasset transaction using a cryptographic key stored in the hardware security module;
• and
• performing, by the server computer, the cryptoasset transaction of the cryptoasset using the cryptographic key.

A cryptoasset custodial system comprising:

• one or more computer processors;
• and
• a non-transitory computer-readable storage medium storing instructions executable by the one or more computer processors, the instructions when executed by the one or more computer processors cause the one or more computer processors to perform operations comprising:
• receiving, by a hardware security module of the cryptoasset custodial system, a requested operation description including data describing a cryptoasset transaction and an organization that owns a cryptoasset;
• determining, by the hardware security module, at least one reviewing entity required for approval of the cryptoasset transaction based at least in part on a policy map for the organization;
• transmitting, by a server computer of the cryptoasset custodial system and to a computing device of the at least one reviewing entity, an approval request for the cryptoasset transaction;
• authenticating, by a risk analysis module of the cryptoasset custodial system, the at least one reviewing entity based on a hardware security token security key received from the computing device of the at least one reviewing entity in response to the approval request, the hardware security token security key associated with a hardware security token of the at least one reviewing entity and indicating an approval of the cryptoasset transaction in accordance with risk parameters defined in the policy map;
• responsive to the authentication of the at least one reviewing entity, signing, by the hardware security module, the cryptoasset transaction using a cryptographic key stored in the hardware security module;
• and
• performing, by the server computer, the cryptoasset transaction of the cryptoasset using the cryptographic key.

A non-transitory computer-readable storage medium storing instructions executable by one or more computer processors of a cryptoasset custodial system, the instructions when executed by the one or more computer processors cause the one or more computer processors to perform operations comprising:

• receiving, by a hardware security module of the cryptoasset custodial system, a requested operation description including data describing a cryptoasset transaction and an organization that owns a cryptoasset;
• determining, by the hardware security module, at least one reviewing entity required for approval of the cryptoasset transaction based at least in part on a policy map for the organization;
• transmitting, by a server computer of the cryptoasset custodial system and to a computing device of the at least one reviewing entity, an approval request for the cryptoasset transaction;
• authenticating, by a risk analysis module of the cryptoasset custodial system, the at least one reviewing entity based on a hardware security token security key received from the computing device of the at least one reviewing entity in response to the approval request, the hardware security token security key associated with a hardware security token of the at least one reviewing entity and indicating an approval of the cryptoasset transaction in accordance with risk parameters defined in the policy map;
• responsive to the authentication of the at least one reviewing entity, signing, by the hardware security module, the cryptoasset transaction using a cryptographic key stored in the hardware security module;
• and
• performing, by the server computer, the cryptoasset transaction of the cryptoasset using the cryptographic key.