JPWO2019143850A5

JPWO2019143850A5 -

Info

Publication number: JPWO2019143850A5
Application number: JP2020540376A
Authority: JP
Publication date: 2022-01-25
Anticipated expiration: 2039-01-17

Description

[0003]「ＭＵＬＴＩ－ＡＰＰＲＯＶＡＬＳＹＳＴＥＭＵＳＩＮＧＭＯＦＮＫＥＹＳＴＯＲＥＳＴＯＲＥＡＣＵＳＴＯＭＥＲＷＡＬＬＥＴ（顧客ウォレットを復元するために、Ｎ個のうちＭ個の鍵を使用するマルチ承認システム）」と題され、本願と同日に出願され、参照により本明細書に組み込まれる米国特許出願第１６／２５０，３４８号（代理人整理番号２７０．０１８ＵＳ０１）。 [0003] Titled "MULTI-APPROVAL SYSTEM USING M OF N KEYS TO RESTORE A CUSTOMER WALLET" (multi-approval system using M of N keys to restore customer wallet), same day as this application. US Pat. No. 6,250,348 (agent reference number 270.188US01), filed in and incorporated herein by reference.

[0004]「ＭＵＬＴＩ－ＡＰＰＲＯＶＡＬＳＹＳＴＥＭＵＳＩＮＧＭＯＦＮＫＥＹＳＴＯＰＥＲＦＯＲＭＡＮＡＣＴＩＯＮＡＴＡＣＵＳＴＯＭＥＲＤＥＶＩＣＥ（顧客デバイスにおいてアクションを実行するために、Ｎ個のうちＭ個の鍵を使用するマルチ承認システム）」と題され、本願と同日に出願され、参照により本明細書に組み込まれる米国特許出願第１６／２５０，３６９号（代理人整理番号２７０．０２７ＵＳ０１）。 [0004] entitled "MULTI-APPROVAL SYSTEM USING M OF N KEYS TO PERFORM AN ACTION AT A CUSTOMER DEVICE" (a multi-approval system that uses M of N keys to perform actions on a customer device). U.S. Patent Application No. 16 / 250,369 (agent reference number 270.027US01), filed on the same date as the present application and incorporated herein by reference.

[0005]「ＭＵＬＴＩ－ＡＰＰＲＯＶＡＬＳＹＳＴＥＭＵＳＩＮＧＭＯＦＮＫＥＹＳＴＯＧＥＮＥＲＡＴＥＡＳＷＥＥＰＩＮＧＴＲＡＮＳＡＣＴＩＯＮＡＴＡＣＵＳＴＯＭＥＲＤＥＶＩＣＥ（顧客デバイスにおいてスイープトランザクションを生成するために、Ｎ個のうちＭ個の鍵を使用するマルチ承認システム）」と題され、本願と同日に出願され、参照により本明細書に組み込まれる米国特許出願第１６／２５０，３７９号（代理人整理番号２７０．０２９ＵＳ０１）。 [0005] "MULTI-APPROVAL SYSTEM USING M OF N KEYS TO GENERATE A SWEEPING TRANSACTION AT A CUSTOMER DEVICE" system using M out of N keys to generate sweep transactions US Pat .

[0210]システム１２００における顧客デバイス１０２は、データを暗号化／復号し、トランザクションアドレスを生成し、オプションの分散型台帳１１８に記録するために、完了したトランザクションを送信し、顧客ウォレット復元中にスイープトランザクションを生成し、および／または、トランザクションに署名する。例では、システム１２００内の顧客デバイス１０２は、Ｎ個の秘密鍵（または鍵コンポーネント）を生成し、それらを安全に保管するためにボールトシステム１２５０に配布することができる。あるいは、システム１２００内の顧客デバイス１０２は、Ｎ個の秘密鍵（または鍵コンポーネント）を生成し、それらのＮ－１個を、Ｎ－１個のそれぞれのボールトシステム１２５０に配布し、秘密鍵（または鍵コンポーネント）の１個を、たとえば、鍵リポジトリ１１１内にローカルに格納することができる。秘密鍵は、階層的決定論的（ＨＤ）秘密鍵、たとえば、上述の秘密アカウント鍵２０４であり得る。秘密鍵の各々には、特定の顧客へインデクス付けすることができる。 [0210] Customer device 102 in system 1200 sends completed transactions and sweeps during customer wallet restore to encrypt / decrypt data, generate transaction addresses, and record in the optional distributed ledger 118. Generate a transaction and / or sign a transaction. In an example, the customer device 102 in the system 1200 can generate N private keys (or key components) and distribute them to the vault system 1250 for secure storage. Alternatively, the customer device 102 in the system 1200 generates N private keys (or key components) and distributes those N-1s to each of the N-1 vault systems 1250 for the private keys (or private keys). Alternatively, one of the key components) can be stored locally, for example, in the key repository 111. The private key can be a hierarchical deterministic (HD) private key, such as the private account key 204 described above. Each of the private keys can be indexed to a specific customer.

Claims

With at least one processor
With at least one memory communicably coupled to the at least one processor,
A third public key communicably coupled to the at least one processor and received from a trusted third party, each first public key of the plurality of first public keys, at each of the iterations. With at least one network interface,
The at least one processor, at each of the plurality of iterations,
Each second public key is configured to be derived from the second parent public key,
Each third public key is configured to be derived from the third parent public key,
A hash function is used to derive each multi-approved transaction address for the distributed ledger of the customer wallet from each of the first public keys, each of the second public keys, and each of the third public keys. Is configured as
The at least one network interface is a computing system configured to send each of the multi-approved transaction addresses to the customer device.

The computing system according to claim 1 , wherein the first public key, the second public key, and the third public key are non-extended keys.

In each of the plurality of iterations, the customer device of the first public key, the second public key, and the third public key to trade from each of the multi-approved transaction addresses. The computing system according to claim 1, which requires a private key corresponding to at least two of them.

The at least one network interface
The computing system of claim 3 , wherein in each of the plurality of iterations, the private key associated with each of the second public keys is configured to communicate with the customer device.

The at least one processor
By comparing the identity data with the stored customer identity data
The computing system of claim 1, which is configured to at least partially validate identity data from the customer device.

The computing system according to claim 5 , wherein the identity data includes biometric data.

The computing system of claim 1, wherein the customer wallet is used to store at least one of securities, currencies, commodities, bonds, funds, or combinations thereof.

The at least one processor further
Each of the first public keys derived from the first parent public key is determined.
Each of the second public keys derived from the second parent public key is determined.
The computing system of claim 1, configured to determine each third public key derived from the third parent public key.

In each of the multiple iterations
In the computing device, the step of receiving each first public key of multiple first public keys,
Steps to derive each second public key from the second parent public key,
Steps to derive each third public key from the third parent public key,
A hash function is used to derive each multi-approved transaction address for the distributed ledger of the customer wallet from each of the first public keys, each of the second public keys, and each of the third public keys. Steps and
A computerized method comprising sending each multi-approved transaction address to a customer device.

The computerized method according to claim 9 , wherein the first public key, each second public key, and each third public key described above are non-extended keys.

In each of the plurality of iterations, the customer device of the first public key, the second public key, and the third public key to trade from each of the multi-approved transaction addresses. The computerized method of claim 9 , which requires a private key corresponding to at least two of them.

11. The computerized method of claim 11 , further comprising communicating the private key associated with each of the second public keys to the customer device in each of the plurality of iterations .

In the computing device
9. The claim 9 further comprises the step of verifying the identity data from the customer device, at least in part, by comparing the identity data from the customer device with the stored customer identity data. Computerized method.

13. The computerized method of claim 13 , wherein the identity data comprises biometric data.

The computerized method of claim 9 , wherein the customer wallet is used to store at least one of securities, currencies, commodities, bonds, funds, or combinations thereof.

The step of determining each of the first public keys derived from the first parent public key, and
A step of determining each of the second public keys derived from the second parent public key, and
The computerized method of claim 9 , further comprising a step of determining each third public key derived from the third parent public key.