System and method of multi-round token distribution using a blockchain network

Patent metadata

Field	Value
Publication number	US-2025086615-A1
Application number	US-202418776050-A
Country	US
Kind code	A1
Filing date	Jul 17, 2024
Priority date	Jun 20, 2017
Publication date	Mar 13, 2025
Grant date	—

Abstract

A computer-implemented method to participate in a token transfer process for transferring a first quantity of token from a sender node to a recipient node using a blockchain is disclosed. The token transfer process includes a plurality of participating nodes and execution of a set of indirect token transactions between multiple pairs of the participating nodes. The method is implemented at a participating node and includes: obtaining a subset of the set of indirect token transactions, the subset including only those transactions for which the participating node is either an input node or an output node, wherein the set of indirect token transactions is generated based on the first quantity of tokens and a predefined number of transaction rounds in the token transfer process; for each indirect token transaction in the subset, collaborating with a respective second participating node included in the indirect token transaction to generate a commitment channel for the indirect token transaction between the participating node and the second participating node; and collaborating with all other participating nodes in executing the indirect token transactions of the subset using the generated commitment channels.

First claim

1 - 15 . (canceled)

16 . A computer-implemented method to participate in a token transfer process for transferring a first quantity of tokens from a sender node to a recipient node using a blockchain, the token transfer process including a plurality of participating nodes and execution of a set of indirect token transactions between multiple pairs of the participating nodes, the sender node and the recipient node being included in the token transfer process as participating nodes, the method, implemented at a participating node, comprising:
obtaining a subset of the set of indirect token transactions, the subset including a first plurality of indirect token transactions for which the participating node is an input node, and a second plurality of indirect token transactions for which the participating node is an output node, wherein the set of indirect token transactions is generated based on the first quantity of tokens and a predefined number of transaction rounds in the token transfer process; identifying a plurality of input addresses for the participating node, one for each of the first plurality of indirect token transactions, and a plurality of output addresses for the participating node, one for each of the second plurality of indirect token transactions; obtaining a key share (k i ) of a first private key (k), the first private key being unknown to all of the participating nodes; and collaborating in deriving a first public key (Q) corresponding to the first private key (k) using secret share joining; for each indirect token transaction in the subset, collaborating with a respective second participating node included in the indirect token transaction to generate a commitment channel for the indirect token transaction between the participating node and the second participating node, by collaboratively:
generating a first blockchain transaction (T c ) for committing an indirect quantity of tokens to transfer to an output address of the indirect token transaction,
generating a second blockchain transaction (T r,0 ) that returns the committed indirect quantity of tokens to an input address of the indirect token transaction, and
generating a third blockchain transaction (T) for executing transfer of the committed indirect quantity of tokens to the output address of the indirect token transaction; and
collaborating with all other participating nodes in executing the indirect token transactions of the subset using the generated commitment channels.

17 . The method claimed in claim 16 , wherein the first blockchain transaction (T c ) is submitted to the blockchain after the second blockchain transaction (T r,0 ) is signed by an output node of the indirect token transaction.

18 . The method claimed in claim 16 , wherein the second blockchain transaction (T r,0 ) includes a transaction parameter (nLockTime) specifying a point in time after which the second blockchain transaction becomes eligible for submission to the blockchain.

19 . The method claimed in claim 16 , wherein the third blockchain transaction (T t ) includes an unlocking script containing a secret value (sv) that is based on the first private key (k).

20 . The method claimed in claim 19 , wherein collaborating with all other participating nodes in executing the indirect token transactions of the subset comprises collaborating with all other participating nodes in deriving the first private key (k) using the key share.

21 . The method claimed in claim 19 , wherein the secret value is the sum of the first private key (k) and a random number provided by an output node of the indirect token transaction.

22 . The method claimed in claim 16 , further comprising verifying the validity of the key share (k i ) and its compatibility with the first public key (Q) using a publicly verifiable secret sharing scheme (PVSS).

23 . The method claimed in claim 16 , wherein collaborating in deriving the first public key (Q) comprises calculating a term of a first Lagrange polynomial interpolation that includes the key share, and summing the term with terms of the first Lagrange polynomial provided by all other participating nodes.

24 . The method claimed in claim 16 , wherein the set of indirect token transactions is further based on a predefined number of transactions per transaction round.

25 . The method claimed in claim 16 , wherein the participating nodes include a plurality of sender-recipient pairs and wherein the set of indirect token transactions is generated based on respective quantities of tokens associated with the plurality of sender-recipient pairs.

26 . The method claimed in claim 16 , wherein for each indirect token transaction of the set, an indirect quantity of tokens for the indirect token transaction is less than a threshold value that is dependent on committed quantity of tokens made available by the transferor.

27 . A non-transitory processor-readable medium storing processor-executable instructions to participate in a token transfer process including a plurality of participating nodes, wherein the processor-executable instructions, when executed by a processor in one of the participating nodes, cause the processor to carry out the method claimed in claim 16 .

28 . A computing device to participate in a token transfer process including a plurality of participating nodes, the computing device being one of the participating nodes, the computing device comprising:
a processor; memory; a network interface to provide network connectivity; a blockchain application containing computer-executable instructions that, when executed by the processor, cause the processor to carry out the method claimed in claim 16 .

Assignees

• Nchain Licensing Ag

Inventors

• Joseph Daniel
• Bartolucci Silvia

Classifications

• H04L9/50 Primary

  using hash chains, e.g. blockchains or hash trees · CPC title

• H04L2209/56

  Financial cryptography, e.g. electronic payment or e-cash · CPC title

• H04L9/3236

  using cryptographic hash functions · CPC title

• H04L9/3215

  using a plurality of channels (network architectures or network communication protocols using different networks H04L63/18) · CPC title

• G06Q20/401

  Transaction verification · CPC title