Knowledge-based authentication for asset wallets
AssigneeCapital One Services, LLC
InventorsSamuel Rapowitz, Xiaoguang Zhu, Kevin Osborn
Life of this patent
Estimating the term…
Abstract
Systems and methods for recovery access to lost blockchain wallet seed phrases are disclosed. The systems and methods can store seed phrases for users for future retrieval. In some examples, a decentralized oracle creates an oracle private key that can be used to authenticate a user who is requesting the seed phrase. In some examples, the oracle creates a private/public key pair that can be used to transmit and store an encrypted version of the seed phrase. The authentication steps described herein also include knowledge-based authentication questions about the wallet, e.g., prior transactions using the wallet, value of the wallet, and the like.
Claims20
A method for recovering access to a wallet, the method comprising:
- receiving, at one or more processors associated with a decentralized oracle, a storage request from a device to store a wallet private key and/or a seed phrase associated with the wallet;
- storing, in a database associated with the decentralized oracle, the wallet private key and/or the seed phrase;
- generating, by a random number generator associated with the one or more processors, an oracle private key associated with the wallet;
- transmitting, from the one or more processors, the oracle private key to the device;
- receiving, from the device and at the one or more processors, a recovery request to receive the wallet private key and/or the seed phrase, the recovery request comprising the oracle private key;
- accessing, by the one or more processors, a decentralized ledger comprising data indicative of activity of the wallet;
- identifying, by the one or more processors, account information associated with one or more transactions completed by the wallet;
- transmitting, from the one or more processors and to the device, a request for confirmation that a client associated with the wallet completed the one or more transactions;
- receiving, from the device and at the one or more processors, a confirmation that the client completed the one or more transactions;
- and
- transmitting, from the one or more processors and to the device, the wallet private key and/or the seed phrase in response to the confirmation.
A method for recovering access to a wallet, the method comprising:
- receiving, at one or more processors associated with a decentralized oracle, a recovery public key, an encrypted seed phrase, and a master public key associated with the wallet, the encrypted seed phrase being encrypted with the recovery public key;
- storing, in a database associated with the decentralized oracle, the recovery public key, the master public key, and the encrypted seed phrase;
- receiving, at the one or more processors, a recovery request from a device to receive the encrypted seed phrase, the recovery request comprising an address associated with an address node;
- accessing, by the one or more processors, a decentralized ledger comprising data indicative of activity of the wallet;
- identifying, by the one or more processors, account information associated with the address;
- transmitting, from the one or more processors and to the device, a knowledge-based authentication question based upon the account information;
- receiving, from the device and at the one or more processors, an answer to the knowledge-based authentication question;
- comparing, by the one or more processors, the answer with the account information;
- and
- transmitting, from the one or more processors, the encrypted seed phrase to the device.
A method for recovering access to a wallet, the method comprising:
- receiving, at one or more processors associated with a decentralized oracle, a storage request from a device to store at least one of a wallet private key or a seed phrase associated with the wallet;
- receiving, from the device and at the one or more processors, a recovery request to receive the at least one of the wallet private key or the seed phrase, the recovery request comprising an oracle private key associated with the wallet;
- transmitting, from the one or more processors and to the device and in response to receiving the oracle private key, a knowledge-based authentication question associated with account information for the wallet;
- receiving, from the device and at the one or more processors, an answer to the knowledge-based authentication question;
- and
- transmitting, from the one or more processors and to the device, an encrypted wallet private key and/or an encrypted seed phrase in response to receiving the answer.
Dependencies are inferred from the claim text.