Managing secure communications with confidential entities

A system for conducting a transaction using a central bank digital currency (CBDC), the system comprising:

• at least one hardware processor;
• and
• at least one non-transitory memory storing instructions that, when executed by the at least one hardware processor, cause the system to:
• receive transaction metadata and a token selection from a payer device at a payer node,
• wherein the transaction metadata comprises a transaction value, an identifier of a payee wallet associated with a payee device, a transaction key associated with the transaction, and an address of a payee node,
• wherein the token selection comprises a first indication of payment tokens and digital signatures corresponding to the payment tokens,
• wherein the first indication of payment tokens includes, for a particular payment token, a corresponding nonce, a corresponding private key generated using the corresponding nonce, and a corresponding digital signature based on the corresponding private key, and
• wherein a sum of values associated with the payment tokens is greater than the transaction value;
• generate a transaction structure for the transaction, the transaction structure comprising the first indication of payment tokens and a second indication of output tokens,
• wherein an indication of at least one token of the output tokens includes a representation of the transaction key;
• and
• using the address of the payee node, transmit the transaction structure to the payee node, wherein the payee node is configured to:
• generate an output signature based on the representation of the transaction key;
• and
• transmit the output signature to the payee wallet associated with the identifier of the payee wallet for validation of the transaction based on verification of the output signature.

One or more non-transitory, computer-readable storage media comprising instructions recorded thereon that, when executed by at least one processor of a system, cause the system to:

• receive, at a payee node, a transaction request comprising a transaction value associated with a transaction;
• in response to the transaction request, generate a transaction key and a transaction private key of a public/private key pair,
• wherein the transaction key is generated based on a first nonce associated with the transaction request;
• transmit the transaction key and the first nonce to a payee device associated with the payee node;
• receive, from a payer node, a transaction structure,
• wherein the transaction structure comprises a first indication of payment tokens and a second indication of output tokens,
• wherein the first indication of payment tokens includes, for a particular payment token, a corresponding nonce, a corresponding private key generated based on the corresponding nonce, and a corresponding digital signature based on the corresponding private key, and
• wherein an indication of at least one token of the output tokens includes a representation of the transaction key;
• generate an output signature based on the representation of the transaction key;
• and
• transmit the output signature to a payee wallet associated with the payee device for validation of the transaction based on verification of the output signature, wherein the payee device is configured to:
• generate a first verification, wherein the first verification comprises an indication that, for a particular payment token, the corresponding digital signature is associated with a corresponding public key;
• generate a second verification, wherein the second verification comprises an indication that the transaction key corresponds to the transaction private key;
• and
• based on the first verification and the second verification, generate a verification message for display on a user interface associated with the payee device.