JPWO2020225814A5 - - Google Patents
Download PDFInfo
- Publication number
- JPWO2020225814A5 JPWO2020225814A5 JP2021566164A JP2021566164A JPWO2020225814A5 JP WO2020225814 A5 JPWO2020225814 A5 JP WO2020225814A5 JP 2021566164 A JP2021566164 A JP 2021566164A JP 2021566164 A JP2021566164 A JP 2021566164A JP WO2020225814 A5 JPWO2020225814 A5 JP WO2020225814A5
- Authority
- JP
- Japan
- Prior art keywords
- value
- account
- isolation device
- accounts
- digital asset
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Claims (29)
ユーザに関連する隔離デバイスの少なくとも1つのプロセッサを利用することであって、前記隔離デバイスは、ユーザによって操作される制限容量入力インタフェースを介してのみ入力を受信し、前記隔離デバイスは、前記隔離デバイスからアクセスデバイスへの送信専用通信が可能な一方向セキュアチャネルによって前記アクセスデバイスに接続され、前記アクセスデバイスは、デジタル資産を統制する複数の計算ノードによって配置されたネットワークに接続される、利用することを含み、
前記少なくとも1つのプロセッサは、
前記隔離デバイスに関連する複数のアカウントを作成することであって、前記複数のアカウントのそれぞれは、デジタル資産の所定の制限された値を格納するよう構成され、前記作成された複数のアカウントの数は、前記隔離デバイスに格納される前記デジタル資産の値全体と前記複数のアカウントのそれぞれに格納されるデジタル資産の前記所定の制限された値とに従って決定される、作成することと、
各々が前記複数のアカウントの各々に割り当てられた複数の非対称暗号鍵ペアを計算することであって、前記複数の非対称暗号鍵ペアの各々は、前記各々のアカウントを暗号化する秘密鍵と、前記各々のアカウントを識別する対応する公開鍵とを含む、計算することと、
前記一方向セキュアチャネルを介し前記複数のアカウントの各々に割り当てられた前記公開鍵を前記ネットワークに接続される前記複数の計算ノードの少なくとも1つの計算ノードに送信することと、
前記ユーザによって操作される前記制限容量入力インタフェースを介し受信される前記デジタル資産の値を移転するためのリクエストに応答して、前記一方向セキュアチャネルを介し前記少なくとも1つの計算ノードに、移転が要求された前記デジタル資産の値に等しい前記デジタル資産の制限された値を格納する前記複数のアカウントの少なくとも1つの秘密鍵を送信することと、
のために利用され、
前記少なくとも1つの計算ノードは、前記少なくとも1つのアカウントに格納される前記制限された値を放出するため前記秘密鍵を利用し、さらに前記少なくとも1つのアカウントから前記要求された値を移転する少なくとも1つの取引を実行するよう構成され、
前記隔離デバイスは、前記アクセスデバイスを介した通信を除き前記ネットワークに接続されず、
前記制限容量入力インタフェースは、テキスト文字列で限定的で極めて少ない量のデータを受信するよう構成される、方法。 A method for enhancing the security of digital assets stored in an isolation device, comprising:
utilizing at least one processor of an isolation device associated with a user, said isolation device receiving input only through a limited volume input interface operated by a user, said isolation device connected to the access device by a one-way secure channel capable of transmit-only communication from to the access device, the access device being connected to a network arranged by a plurality of computational nodes governing digital assets; including
The at least one processor
creating a plurality of accounts associated with said isolation device, each of said plurality of accounts configured to store a predetermined limited value of digital assets; and a number of said plurality of accounts created; is determined according to the overall value of the digital asset stored in the isolation device and the predetermined limited value of the digital asset stored in each of the plurality of accounts;
calculating a plurality of asymmetric cryptographic key pairs, each assigned to each of said plurality of accounts, each of said plurality of asymmetric cryptographic key pairs comprising a private key encrypting said respective account; calculating, including a corresponding public key that identifies each account;
transmitting the public key assigned to each of the plurality of accounts over the one-way secure channel to at least one computing node of the plurality of computing nodes connected to the network;
a transfer request to the at least one computing node over the one-way secure channel in response to a request to transfer the value of the digital asset received via the user-operated quota input interface; transmitting at least one private key of the plurality of accounts storing a restricted value of the digital asset equal to the value of the digital asset obtained;
used for
The at least one computing node utilizes the private key to release the restricted value stored in the at least one account, and at least one that transfers the requested value from the at least one account. configured to execute one transaction,
the isolation device is not connected to the network except for communication via the access device;
The method of claim 1, wherein the limited capacity input interface is configured to receive a limited and very small amount of data in a text string.
前記隔離デバイスは、暗号通貨ウォレットである、請求項1に記載の方法。 the digital assets include cryptocurrencies;
2. The method of claim 1, wherein the quarantine device is a cryptocurrency wallet.
前記2つの状態の使用準備完了状態では、各アカウントは、前記デジタル資産のゼロの値を格納し、受け取った値の少なくとも一部を格納するのに利用可能であり、
前記2つの状態の使用状態では、前記各アカウントは、前記デジタル資産の制限された値を格納し、更なるデジタル資産を格納するのに利用可能でない、請求項1に記載の方法。 each of the plurality of accounts being in one of two states at any given time;
in the ready-to-use state of the two states, each account stores a zero value of the digital asset and is available to store at least a portion of the received value;
2. The method of claim 1, wherein in the two states of use, each account stores a limited value of the digital asset and is not available to store additional digital assets.
前記使用準備完了状態に現在ある各アカウントは、受け取った値の少なくとも一部が前記各アカウントに格納されているとき、前記使用状態に切り替わり、
前記使用状態に現在ある各アカウントは、前記各アカウントに格納される前記制限された値が前記隔離デバイスから移転されるとき、前記使用準備完了状態に切り替わり、新たな非対称暗号鍵ペアが、前記各アカウントに対して識別される使用サイクルの数に基づいて前記各アカウントに対して作成される、請求項6に記載の方法。 each of the plurality of accounts is configured to support multiple uses such that each account supports multiple cycles of use in which each account transitions between the two states;
each account currently in the ready-to-use state switches to the use state when at least a portion of the received values are stored in the respective account;
Each account currently in the in-use state switches to the ready-to-use state when the restricted values stored in each account are transferred from the isolation device, and a new asymmetric cryptographic key pair is transferred to each of the 7. The method of claim 6, created for each account based on the number of usage cycles identified for the account.
前記受け取られた値は、前記隔離デバイスと前記少なくとも1つの計算ノードとによって共有される決定的に計算される順序に従って増加的にインデックス付けされる前記複数のアカウントの少なくとも1つの使用準備完了アカウントに格納され、前記複数のアカウントの最も直近に使用されたアカウントに続くインデックスを有する前記少なくとも1つの使用準備完了アカウントは、前記受け取られた値と前記制限された値とに従って決定される、請求項7に記載の方法。 further comprising receiving a value of said digital asset determined according to a received limited length string computed by said at least one computing node;
The received value is stored in at least one ready-to-use account of the plurality of accounts indexed incrementally according to a deterministically computed order shared by the isolation device and the at least one compute node. 8. The at least one ready-to-use account stored and having an index following the most recently used account of the plurality of accounts is determined according to the received value and the restricted value. The method described in .
前記複数の新たな非対称暗号鍵ペアのそれぞれは、前記複数のアカウントシードからのアカウントシードに基づいて決定的に生成され、前記アカウントシードは、前記隔離デバイスに対して実行される初期化処理の数を示す初期化数と各アカウントとを有する、請求項12に記載の方法。 a plurality of new asymmetric cryptographic key pairs are generated for the plurality of accounts during each initialization process performed by the user on the quarantine device;
each of the plurality of new asymmetric cryptographic key pairs is deterministically generated based on an account seed from the plurality of account seeds, the account seed being a number of initialization operations performed on the quarantine device; 13. The method of claim 12 , having an initialization number and each account indicating .
前記復旧処理は、メモリ消去を受けた前記隔離デバイスと、前記ユーザのスクラップされる隔離デバイスと交換するため前記ユーザに関連する隔離デバイスとから構成される群のメンバーである少なくとも1つの故障の後に前記隔離デバイスを復元するよう実行される、請求項13に記載の方法。 the initialization process is a member of a group consisting of a first initialization process of the isolation device and a recovery process of the isolation device;
The recovery process is performed after at least one failure that is a member of a group consisting of the quarantine device that has undergone a memory erase and the quarantine device associated with the user to replace the scrapped quarantine device of the user. 14. The method of claim 13, performed to restore the isolation device.
前記隔離デバイスは、前記バックアップ値を利用して、復旧処理中に前記隔離デバイスに提供される状態情報の少なくとも一部を有効にする、請求項19に記載の方法。 During the restore process, at least one string of limited length is received to encode the backup value;
20. The method of claim 19, wherein the quarantine device utilizes the backup values to validate at least a portion of state information provided to the quarantine device during recovery processing.
前記隔離デバイスは、前記シードを利用して受信した状態情報に対して計算された他の値と前記バックアップ値との間のマッチングによって、前記提供された状態情報を検証する、請求項20に記載の方法。 further comprising utilizing the seed to calculate the backup value in support of detection of bogus state information provided to the quarantine device during the restoration process;
3. The isolation device verifies the provided state information by matching between the backup value and another value calculated for the state information received using the seed . 20. The method according to 20.
前記隔離デバイスは、前記バックアップ値から導出される前記作成時間に基づいて前記受信した状態情報の有効性を判定する、請求項21に記載の方法。 the backup value further includes a creation time of the backup;
22. The method of claim 21, wherein the quarantine device determines validity of the received state information based on the creation time derived from the backup value.
前記移転される値の移転元の少なくとも1つのアカウントの秘密鍵が、各々が前記グループの計算ノードの各々に送信される複数の鍵コンポーネントとして構成され、
前記少なくとも1つのアカウントから前記制限された値を放出するのに必要とされる前記秘密鍵が、前記グループの計算ノードの所定の一部の前記鍵コンポーネントを集約することによって構成される、請求項1に記載の方法。 further comprising transferring value of the digital asset by communicating with a group of compute nodes of the plurality of compute nodes of the network;
wherein the private key of at least one account from which the transferred value is transferred is configured as a plurality of key components each transmitted to each of the computing nodes of the group;
3. The private key required to release the restricted value from the at least one account is constructed by aggregating the key components of a predetermined subset of computing nodes of the group. 1. The method according to 1.
前記第2の部分データ値は、前記他の隔離デバイスに割り当てられた第2の一意的なシードを利用して前記他の隔離デバイスによって計算される、請求項24に記載の方法。 the first partial data value is calculated by the isolation device using a first unique seed assigned to the isolation device;
25. The method of claim 24, wherein said second partial data value is calculated by said other isolation device utilizing a second unique seed assigned to said other isolation device.
第2の部分データ値のそれぞれは、特定の第2の部分データ値が与えられると、前記特定の第2の部分データ値に先行する全ての第2の部分値が前記特定の第2の部分データ値から決定的に推論可能となるように、後続する第2の部分データ値に基づいて計算される、請求項24に記載の方法。 Each of the first partial data values is such that, given a particular first partial data value, all first partial data values following said particular first partial data value are said particular first portion data values. calculated on the basis of the preceding first partial data value so as to be deterministically inferable from the data value;
Each of the second partial data values is such that, given a particular second partial data value, all second partial data values preceding said particular second partial data value are equal to said particular second partial data value. 25. The method of claim 24, calculated on the basis of subsequent second partial data values so as to be conclusively inferable from the data values.
送信専用通信が可能であって、デジタル資産を統制する複数の計算ノードによって配置されるネットワークに接続されるアクセスデバイスと前記隔離デバイスとを接続する一方向セキュアチャネルであって、前記送信専用通信は、前記隔離デバイスから前記アクセスデバイスへのものであり、前記隔離デバイスは、前記アクセスデバイスを介した通信を除き前記ネットワークに接続されない、一方向セキュアチャネルと、
ユーザが操作することによって入力される少なくとも1つの制限された長さの文字列を受け取るよう構成される制限容量インタフェースと、
コードを格納する記憶媒体と、
前記一方向セキュアチャネル、前記制限容量インタフェース及び前記記憶媒体に結合され、前記ユーザによって操作される制限容量入力インタフェースを介してのみ入力を受信し、前記コードを実行する少なくとも1つのプロセッサと、
を有し、
前記コードは、
前記隔離デバイスに関連する複数のアカウントを作成するためのコード命令であって、前記複数のアカウントのそれぞれは、デジタル資産の所定の制限された値を格納するよう構成され、前記作成された複数のアカウントの数は、前記隔離デバイスに格納される前記デジタル資産の値全体と前記複数のアカウントのそれぞれに格納されるデジタル資産の前記所定の制限された値とに従って決定される、コード命令と、
各々が前記複数のアカウントの各々に割り当てられた複数の非対称暗号鍵ペアを計算するためのコード命令であって、前記複数の非対称暗号鍵ペアの各々は、前記各々のアカウントを暗号化する秘密鍵と、前記各々のアカウントを識別する対応する公開鍵とを含む、コード命令と、
前記ユーザによって操作される前記制限容量入力インタフェースを介し受け取られるリクエストに応答して、前記一方向セキュアチャネルを介し前記複数のアカウントの各々に割り当てられた前記公開鍵を前記ネットワークに接続される前記複数の計算ノードの少なくとも1つの計算ノードに送信するためのコード命令と、
前記少なくとも1つの計算ノードに、移転される値に等しい前記デジタル資産の制限された値を格納する前記複数のアカウントの少なくとも1つの秘密鍵を送信することによって前記デジタル資産の値を移転するためのコード命令と、
を含み、
前記少なくとも1つの計算ノードは、前記少なくとも1つのアカウントに格納される前記制限された値を放出するため前記秘密鍵を利用し、さらに前記少なくとも1つのアカウントから前記移転される値を移転する少なくとも1つの取引を実行するよう構成され、
前記隔離デバイスは、前記ユーザによって操作される前記制限容量入力インタフェースを介してのみ入力を受信する、隔離デバイス。 An isolation device associated with a user for enhancing the security of digital assets stored on the isolation device, comprising:
A one-way secure channel capable of send-only communication and connecting said isolation device with an access device connected to a network arranged by a plurality of computing nodes governing a digital asset, said send-only communication being , a one-way secure channel from the isolation device to the access device, wherein the isolation device is not connected to the network except for communication through the access device;
a limited capacity interface configured to receive at least one character string of limited length input by user manipulation ;
a storage medium storing the code;
at least one processor that receives input only via a limited capacity input interface that is coupled to the one-way secure channel, the limited capacity interface and the storage medium and that is operated by the user and executes the code;
has
Said code is
code instructions for creating a plurality of accounts associated with the isolation device, each of the plurality of accounts configured to store a predetermined limited value of a digital asset; code instructions, wherein the number of accounts is determined according to the total value of the digital assets stored in the isolation device and the predetermined limited value of digital assets stored in each of the plurality of accounts;
Code instructions for calculating a plurality of asymmetric cryptographic key pairs, each assigned to each of said plurality of accounts, each of said plurality of asymmetric cryptographic key pairs being a private key encrypting said respective account. and a corresponding public key that identifies each account;
responsive to a request received through said user-operated quota input interface, said public key assigned to each of said plurality of accounts through said one-way secure channel is transferred to said plurality of accounts connected to said network; code instructions for transmission to at least one of the computing nodes of
for transferring the value of said digital asset by transmitting to said at least one computation node a private key of at least one of said plurality of accounts storing a restricted value of said digital asset equal to the value to be transferred; code instructions;
including
The at least one computing node utilizes the private key to release the restricted value stored in the at least one account, and at least one that transfers the transferred value from the at least one account. configured to execute one transaction,
The isolation device, wherein the isolation device receives input only through the limited capacity input interface operated by the user .
Applications Claiming Priority (3)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US16/404,843 US20200356989A1 (en) | 2019-05-07 | 2019-05-07 | Transferring digital assets possession over a unidirectional connection |
US16/404,843 | 2019-05-07 | ||
PCT/IL2020/050496 WO2020225814A1 (en) | 2019-05-07 | 2020-05-06 | Transferring digital assets possession over a unidirectional connection |
Publications (2)
Publication Number | Publication Date |
---|---|
JP2022531497A JP2022531497A (en) | 2022-07-06 |
JPWO2020225814A5 true JPWO2020225814A5 (en) | 2023-05-12 |
Family
ID=73047207
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
JP2021566164A Withdrawn JP2022531497A (en) | 2019-05-07 | 2020-05-06 | Transfer of digital asset ownership over a one-way connection |
Country Status (6)
Country | Link |
---|---|
US (1) | US20200356989A1 (en) |
EP (1) | EP3967019A4 (en) |
JP (1) | JP2022531497A (en) |
IL (1) | IL287893A (en) |
SG (1) | SG11202112273UA (en) |
WO (1) | WO2020225814A1 (en) |
Families Citing this family (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US11200260B2 (en) * | 2019-06-11 | 2021-12-14 | International Business Machines Corporation | Database asset fulfillment chaincode deployment |
US11645268B2 (en) | 2019-06-11 | 2023-05-09 | International Business Machines Corporation | Database world state performance improvement |
US11588631B2 (en) * | 2019-10-09 | 2023-02-21 | Arizona Board Of Regents On Behalf Of Arizona State University | Systems and methods for blockchain-based automatic key generation |
US11270292B2 (en) * | 2020-04-28 | 2022-03-08 | Dwolla, Inc. | Key pair authentication in a label tracking system |
US11699147B2 (en) * | 2020-09-23 | 2023-07-11 | SOURCE Ltd. | System and method of performing secured transactions in a communication network |
US11797716B2 (en) * | 2021-08-24 | 2023-10-24 | Bank Of America Corporation | ATM encrypted screens powered by smart glass for screen decryption |
Family Cites Families (9)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20140282938A1 (en) * | 2013-03-15 | 2014-09-18 | Adam Moisa | Method and system for integrated cloud storage management |
US9892460B1 (en) * | 2013-06-28 | 2018-02-13 | Winklevoss Ip, Llc | Systems, methods, and program products for operating exchange traded products holding digital math-based assets |
US20150324789A1 (en) | 2014-05-06 | 2015-11-12 | Case Wallet, Inc. | Cryptocurrency Virtual Wallet System and Method |
MX2018009355A (en) * | 2016-02-23 | 2018-12-19 | Nchain Holdings Ltd | Secure multiparty loss resistant storage and transfer of cryptographic keys for blockchain based systems in conjunction with a wallet management system. |
KR20180114939A (en) * | 2016-02-23 | 2018-10-19 | 엔체인 홀딩스 리미티드 | Systems and methods for controlling asset-related activities through block chaining |
GB201613109D0 (en) * | 2016-07-29 | 2016-09-14 | Eitc Holdings Ltd | Computer implemented method and system |
CN107194676A (en) | 2017-05-05 | 2017-09-22 | 北京库神信息技术有限公司 | A kind of virtual coin store transaction system and its application method |
CN111971674A (en) * | 2018-02-15 | 2020-11-20 | Gk8 有限公司 | Cryptographic currency wallet and cryptographic currency account management |
CA3098247A1 (en) * | 2018-05-15 | 2019-11-21 | Kelvin Zero Inc. | Systems, methods, and devices for secure blockchain transaction and subnetworks |
-
2019
- 2019-05-07 US US16/404,843 patent/US20200356989A1/en active Pending
-
2020
- 2020-05-06 EP EP20802429.9A patent/EP3967019A4/en active Pending
- 2020-05-06 WO PCT/IL2020/050496 patent/WO2020225814A1/en unknown
- 2020-05-06 SG SG11202112273UA patent/SG11202112273UA/en unknown
- 2020-05-06 JP JP2021566164A patent/JP2022531497A/en not_active Withdrawn
-
2021
- 2021-11-07 IL IL287893A patent/IL287893A/en unknown
Similar Documents
Publication | Publication Date | Title |
---|---|---|
KR101727525B1 (en) | Block chain based distributed storage method and device thereof | |
US11102184B2 (en) | System and method for information protection | |
US10715500B2 (en) | System and method for information protection | |
US10938549B2 (en) | System and method for information protection | |
CN108924092A (en) | Based on block chain can open arbitration distribution cloud storage method and system | |
WO2019072279A2 (en) | System and method for information protection | |
CN106533661A (en) | Online generation method for cryptographic currency address based on combined public key | |
US20210150512A1 (en) | Method and device for providing transaction service for cryptocurrencies based on different blockchains | |
CN112131227A (en) | Data query method and device based on alliance chain | |
TW202011312A (en) | Authenticating server and method for transactions on blockchain | |
CN111507839A (en) | Data processing method and device based on block chain, storage medium and equipment | |
CN110070363A (en) | Account management method and verification method in block chain network and terminal equipment | |
CN115147111A (en) | Key generation method and device, electronic device and storage medium | |
CN109615348A (en) | A kind of method of mark encryption currency wallet address and a kind of encryption money-system | |
JPWO2020225814A5 (en) | ||
Chaudhary et al. | A module lattice based construction of post quantum secure blockchain architecture | |
CN114581070A (en) | Block chain payment channel network path selection method and system based on homomorphic encryption | |
AU2019101582A4 (en) | System and method for information protection | |
JP2019145926A (en) | Chip wallet | |
Changshun et al. | Construction of Blockchain Product Technology Evaluation Index System | |
Chhajeda et al. | Secure Cryptography Key Management System for Web Based Wallet Management System | |
CN112258169A (en) | Parallel signature system and method based on key generation | |
CN115378576A (en) | Digital collection wallet system for connecting different alliance chains and performing address management | |
CN116112154A (en) | Method and system for performing cryptocurrency asset transactions | |
CN116975918A (en) | Model training method and device based on privacy protection |