Secure transaction controller for value token exchange systems

A system for issuing cryptographically signed digital tokens of a first class as part of an exchange of digital tokens of different classes, comprising:

• a processor;
• a memory in communication with the processor;
• a secure memory storing a mint key;
• instructions stored in the memory and executed by the processor, to
• (a) responsive to a first client device requesting from an exchange server an exchange of a first set of cryptographically signed digital tokens of the first class for a second set of digital tokens of a second class,
• receive a message from the exchange server including the first set of digital tokens,
• confirm the validity of the first set of digital tokens,
• cause the first set of digital tokens to be placed in an escrow state,
• send an acknowledgement message to the exchange server indicating the first set of digital tokens are valid and have been placed in an escrow state,
• (b) subsequent to sending the acknowledgement message, receive an instruction from the exchange server to swap the first set digital tokens for a new set of coded digital tokens of the first class and second client device information,
• (c) responsive to receiving the instruction, cryptographically sign, using the mint key, each of the new set of coded digital tokens, each of the new set of coded digital tokens including information sufficient to confirm the second client device is the original recipient of that token, and
• (d) send the new set of signed coded digital tokens to the second client device.

A method of issuing new cryptographically signed digital tokens as part of providing a secure token exchange transaction for cryptographically signed digital tokens of different classes, comprising:

• responsive to an exchange server receiving a first digital message including a first request from a first client device to exchange a first set of digital tokens of a first class for digital tokens of a second class, receiving a message including the first set of digital tokens from the exchange server;
• after receiving the message, confirming the validity of each of the first set of digital tokens;
• after receiving the message, placing each of the first set of digital tokens in an escrow state;
• sending an acknowledgement confirming that all of the digital tokens in the first set of digital tokens are valid and have been placed in escrow;
• subsequent to sending the acknowledgement, receiving an instruction from the exchange server to swap the first set digital tokens for a new set of coded digital tokens of the first class and second client device information;
• responsive to receiving the instruction, cryptographically signing using a mint key each of the new set of coded digital tokens, each of the new coded tokens including information sufficient to confirm the second client device is the original recipient of that token;
• and
• sending the new set of signed coded digital tokens to the second client device.

A non-transitory machine readable medium storing a program, configured to, when executed by a processor, to cause a processor to

• responsive to an exchange server receiving a first digital message including a first request from a first client device to exchange a first set of digital tokens of a first class for digital tokens of a second class, receive a message including the first set of digital tokens from the exchange server;
• after receiving the message, confirm the validity of each of the first set of digital tokens;
• after receiving the message, place each of the first set of digital tokens in an escrow state;
• send an acknowledgement confirming that the first set of digital tokens is valid and has been placed in escrow;
• subsequent to sending the acknowledgement, receive an instruction from the exchange server to swap the first set digital tokens for a new set of coded digital tokens of the first class and second client device information;
• responsive to receiving the instruction, cryptographically sign using a mint key each of the new set of coded digital tokens, each of the new set of coded tokens including information sufficient to confirm the second client device is the original recipient that token, and
• send the new set of signed coded digital tokens to the second client device.