Trifocal key for controlling custodians of digital assets

Patent metadata

Field	Value
Publication number	US-12045810-B2
Application number	US-202117483716-A
Country	US
Kind code	B2
Filing date	Sep 23, 2021
Priority date	Sep 23, 2021
Publication date	Jul 23, 2024
Grant date	Jul 23, 2024

Abstract

An example operation may include one or more of receiving, via a custodial service, a request to transact with a digital asset owned by a user and temporarily in custody of the custodial service, generating a blockchain transaction comprising an identifier of the digital asset on a blockchain ledger, an identifier of the custodial service, and an identifier of a recipient of the digital asset, signing the blockchain transaction with a key from a trifocal key which proves that the custodial service is authorized to transact with the digital asset on behalf of the user, and storing the signed blockchain transaction on a blockchain ledger.

First claim

What is claimed is:

1. A blockchain system comprising:
a digital asset owned by an owner;
a custodian in communication with the owner; and
a recipient of the digital asset in communication with the owner and the custodian,
where the owner comprises a processor that, when executing instructions stored in an associated memory, is configured to:
in response to a request by the owner to place the digital asset into custody of the custodian, generate, using a master seed corresponding to the owner, a trifocal key comprising an ownership key, a permission key, and a consent key that are linked by the master seed, wherein the trifocal key does not expose the ownership key to the custodian or the recipient;
send the digital asset and an encrypted version of the permission key to the custodian to enable the custodian to transfer the digital asset to the recipient on behalf of the owner;
send an encrypted version of the consent key to the recipient to enable the recipient to execute a blockchain transaction signed with the consent key concerning the digital asset in response to a blockchain transaction signed with the permission key from the custodian,

where the custodian comprises a processor configured to:
generate a blockchain transaction, and
sign the blockchain transaction to create the blockchain transaction signed with the permission key, and
store the blockchain transaction signed with the permission key in a blockchain ledger; and

where the recipient comprises a processor configured to;
execute the blockchain transaction signed with the consent key to perform a downstream function with the digital asset.

2. The apparatus of claim 1 , wherein the ownership key is a private key of the owner.

3. The apparatus of claim 2 , wherein the master seed is a key pair comprising the private key and a public key of a location of the digital asset.

4. The apparatus of claim 1 , wherein, when the processor generates the trifocal key, the processor is further configured to:
encrypt the permission key and the consent key as part of a generation process of the trifocal key.

5. The apparatus of claim 1 , wherein the processor is further configured to:
encrypt both the permission key and the consent key with the ownership key to generate the encrypted permission key, and the encrypted consent key.

6. The apparatus of claim 1 , wherein the owner is the only one who can decrypt the encrypted permission key, and the encrypted consent key.

7. The apparatus of claim 1 , wherein the processor is further configured to:
verify the blockchain transactions based on an identification that the master seed is used to generate the permission key and the consent key used in the blockchain transactions.

8. A method comprising:
requesting by an owner of a digital asset in a blockchain network to place the digital asset into custody of a custodian in the blockchain network for transfer to a recipient in the blockchain network;
in response to the request, generating by the owner using a master seed corresponding to the owner a trifocal key comprising an ownership key, a permission key, and a consent key that are linked by the master seed, wherein the trifocal key does not expose the ownership key to the custodian or the recipient;

sending by the owner the digital asset and an encrypted version of the permission key to the custodian to enable the custodian to transfer the digital asset to the recipient on behalf of the owner;
sending by the owner an encrypted version of the consent key to the recipient to enable the recipient to execute a blockchain transaction signed with the consent key concerning the digital asset in response to a blockchain transaction signed with the permission key from the custodian;
generating a blockchain transaction by the custodian;
signing the blockchain transaction by the custodian to create the blockchain transaction signed with the permission key;
storing the blockchain transaction signed with the permission key in a blockchain ledger by the custodian; and
executing the blockchain transaction signed by the recipient with the consent key to perform a downstream function with the digital asset.

9. The method of claim 8 , wherein the ownership key is a private key of the owner.

10. The method of claim 9 , wherein the master seed is a key pair comprising the private key and a public key of a location of the digital asset.

11. The method of claim 8 , wherein the generating the trifocal key further comprises:
encrypting the permission key and the consent key as part of a generation process of the trifocal key.

12. The method of claim 8 , further comprising:
encrypting both the permission key and the consent key with the ownership key to generate the encrypted permission key and the encrypted consent key.

13. The method of claim 8 , wherein the owner is the only one who can decrypt the encrypted permission key and the encrypted consent key.

14. The method of claim 8 , further comprising:
verifying the blockchain transactions based on an identification that the master seed is used to generate the permission key and the consent key used in the blockchain transactions.

15. A computer program product comprising a computer-readable medium storing instructions that, when executed by one or more processors associated with an owner of a digital asset, a custodian of the digital asset, and a recipient of the digital asset in a blockchain network, cause the one or more processors to perform:
requesting by the processor of the owner to place the digital asset into custody of the custodian for transfer to the recipient;
in response to the request, generating by the owner using a master seed corresponding to the owner a trifocal key comprising an ownership key, a permission key, and a consent key that are linked by the master seed, wherein the trifocal key does not expose the ownership key to the custodian or the recipient;

sending by the processor of the owner the digital asset and an encrypted version of the permission key to the custodian to enable the custodian to transfer the digital asset to the recipient on behalf of the owner;
sending by the owner an encrypted version of the consent key to the recipient to enable the recipient to execute a blockchain transaction signed with the consent key concerning the digital asset in response to a blockchain transaction signed with the permission key from the custodian;
generating a blockchain transaction by the custodian;
signing the blockchain transaction by the custodian to create the blockchain transaction signed with the permission key;
storing the blockchain transaction signed with the permission key in a blockchain ledger by the custodian; and
executing by the processor of the recipient the blockchain transaction signed with the consent key to perform a downstream function with of the digital asset.

16. The computer program product of claim 15 , wherein the ownership key is a private key of the owner.

17. The computer program product of claim 16 , wherein the master seed is a key pair comprising the private key and a public key of a location of the digital asset.

18. The computer program product of claim 15 , wherein the generating the trifocal key further comprises:
encrypting the permission key and the consent key as part of a generation process of the trifocal key.

19. The computer program product of claim 15 , wherein the instructions further cause the processor to perform:
encrypting both the permission key and the consent key with the ownership key to

Assignees

• IBM

Inventors

• Gaur Nitin
• Novotny Petr
• Manevich Yacov
• Barger Artem
• Zhu Yada

Classifications

• G06Q20/389

  Keeping log of transactions for guaranteeing non-repudiation of a transaction · CPC title

• G06F16/27

  Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor · CPC title

• G06Q40/04 Primary

  Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange · CPC title

• G06N20/00

  Machine learning · CPC title

• G06Q20/02

  involving a neutral party, e.g. certification authority, notary or trusted third party [TTP] · CPC title