Portable memory device configured for host device to manage access to digital assets
An example system can include a memory card that is removably and securely coupled to a computing device. In one example, the system can cause operations to be performed to determine that the computing device is authorized to communicate with a particular memory card when the memory card is communicatively coupled to the computing device. If communication is authorized, the operations can include authorizing the computing device to access and manage a digital asset using a key stored on the memory card.
1 . A method performed by a computer program executing on a computing device, the method comprising:
detecting that a removable memory device is physically connected to the computing device;
causing a communication session to be initiated between wireless transceivers of the computing device and the removable memory device in response to detecting that the removable memory device is physically connected to the computing device,
wherein the removable memory device is configured to store a particular cryptographic wallet including a cryptographic key to access a cryptographic asset and first configuration information to authorize pairing of the removable memory device to a number of pre-authorized computing devices;
comparing the first configuration information stored at the removable memory device to second configuration information stored at the computing device;
responsive to determining, based on a comparison of the first and second configuration information, that the computing device is authorized to communicate with the removable memory device, perform operations comprising:
accessing the cryptographic key of the particular cryptographic wallet stored on the removable memory device, and
accessing the cryptographic asset by using the cryptographic key of the particular cryptographic wallet stored on the removable memory device,
wherein the cryptographic asset is stored on the removable memory device, on another memory device of the computing device, or on a blockchain network accessible by the computing device,
performing, via the computing device, digital management of the cryptographic asset; and
responsive to determining, based on the comparison of the first and second configuration information, that the computing device is not authorized to communicate with the removable memory device, performing operations comprising:
terminating the communication session, and
initiating transmittal of an electronic communication to another computing device that is known to be associated with an authorized user.
2 . The method of claim 1 , wherein the second configuration information is based on at least two portions of a seed phrase obtained from a set of M devices,
wherein the at least two portions of the seed phrase are distributed across N devices, and
wherein M=N−K where K≥1.
3 . The method of claim 2 , wherein the set of M devices includes the removable memory device.
4 . The method of claim 2 , further comprising:
determine that the computing device is authorized to communicate with the removable memory device by verifying that at least a predetermined number of M devices in the set of M devices are associated with a particular user or account.
5 . The method of claim 1 , wherein, prior to accessing the cryptographic asset, the computing device is configured to authenticate a user based on at least one of:
a password received at the computing device,
a facial feature recognizable, at the computing device, by a facial recognition algorithm, or
a fingerprint feature recognizable, at the computing device, by a fingerprint recognition algorithm.
6 . The method of claim 1 , wherein the removable memory device is at least one of:
a secured digital (SD) card,
an SD High-Capacity card,
an SD Extended Capacity (SDXC) card,
an SD Ultra Capacity (SDUC) card,
a Compact Flash (CF) card,
a MicroDrive (MD) card, or
a universal serial bus (USB) drive.
7 . The method of claim 1 , wherein the configuration information further comprises an identification feature of the computing device, the identification feature comprising at least one of a device address, an International Mobile Equipment Identity (IMEI) number, an International Mobile Subscriber Identity (IMSI) number, an Integrated Circuit Card Identifier (ICCID), an eSIM identifier, or an identifier relating to a transceiver.
8 . A computer-implemented method performed at least in part by a computing device, the method comprising:
establishing a communication session with a memory device via wireless transceivers of the computing device and the memory device while the memory device is docked into the computing device,
wherein the memory device is configured to store a particular cryptographic wallet including (1) a cryptographic key to access a cryptographic asset, (2) a first copy of computing device authentication information, (3) a timeout setting, and (4) configuration information including computer-executable code that, when executed, prompts transmittal of an electronic communication by the computing device to another computing device associated with an authorized user;
comparing the first copy of the computing device authentication information stored at the memory device to a second copy of the computing device authentication information accessible via the computing device;
responsive to determining, based on a comparison of the computing device authentication information, that the computing device is authorized to communicate with the memory device within a time period indicated by the timeout setting, performing operations comprising:
accessing the cryptographic key of the particular cryptographic wallet stored on the memory device, and
accessing the cryptographic asset by using the cryptographic key of the particular cryptographic wallet stored on the memory device,
wherein the cryptographic asset is stored on the memory device, on another memory device of the computing device, or on a blockchain network accessible by the computing device; and
performing, via the computing device, digital management of the cryptographic asset.
9 . The method of claim 8 , wherein the second copy of the computing device authentication information is based on at least two portions of a seed phrase obtained from a set of M devices,
wherein the at least two portions of the seed phrase are distributed across N devices, and
wherein M=N−K where K≥1.
10 . The method of claim 9 , wherein the set of M devices includes the memory device.
11 . The method of claim 9 , further comprising:
determining that the computing device is authorized to communicate with the memory device by verifying that at least a predetermined number of M devices in the set of M devices are associated with a particular entity or user.
12 . The method of claim 8 , further comprising authenticating a user based on at least one of:
a password received at the computing device,
a facial feature recognizable, at the computing device, by a facial recognition algorithm, or
a fingerprint feature recognizable, at the computing device, by a fingerprint recognition algorithm.
13 . The method of claim 8 , wherein the memory device is at least one of:
a secured digital (SD) card,
an SD High-Capacity card,
an SD Extended Capacity (SDXC) card,
an SD Ultra Capacity (SDUC) card,
a Compact Flash (CF) card,
a MicroDrive (MD) card, or
a universal serial bus (USB) drive.
14 . The method of claim 8 , wherein the computing device authentication information further comprises an identification feature of the computing device, the identification feature comprising at least one of a device address, an International Mobile Equipment Identity (IMEI) number, an International Mobile Subscriber Identity (IMSI) number, an Integrated Circuit Card Identifier (ICCID), an eSIM identifier, or an identifier relating to a transceiver.
15 . A system comprising a computing device, one or more processors, and a memory device storing computer instructions, which when executed by the one or more processors, cause the computing device to:
establish a communication session with the memory device via wireless transceivers of the computing device and the memory device while the memory device is physically connected to the computing device,
wherein the memory device is configured to store a particular cryptographic wallet including (1) a cryptographic key to access a cryptographic asset, (2) a first copy of computing device authentication information, (3) a predetermined period of time, and (4) configuration information including computer-executable code that, when executed, prompts transmittal of an electronic communication by the computing device to another computing device associated with an authorized user;
compare the first copy of the computing device authentication information stored at the memory device to a second copy of the computing device authentication information accessible via the computing device;
responsive to determining, based on a comparison of the computing device authentication information, that the computing device is authorized to communicate with the memory device within a time period indicated by the predetermined period of time, perform operations comprising:
access the cryptographic key of the particular cryptographic wallet stored on the memory device, and
access the cryptographic asset by using the cryptographic key of the particular cryptographic wallet stored on the memory device,
wherein the cryptographic asset is stored on the memory device, on another memory device of the computing device, or on a blockchain network accessible by the computing device; and
perform, via the computing device, digital management of the cryptographic asset.
16 . The system of claim 15 , wherein the second copy of the computing device authentication information is based on at least two portions of a seed phrase obtained from a set of M devices,
wherein the at least two portions of the seed phrase are distributed across N devices, and
wherein M=N−K where K≥1.
17 . The system of claim 16 , wherein the set of M devices includes the memory device.
18 . The system of claim 16 , wherein the computer instructions cause the computing device to:
determine that the computing device is authorized to communicate with the memory device by verifying that at least a predetermined number of M devices in the set of M devices are associated with a particular user or account.
19 . The system of claim 15 , wherein, prior to accessing the cryptographic asset, the computing device is configured to authenticate a user based on at least one of:
a password received at the computing device,
a facial feature recognizable, at the computing device, by a facial recognition algorithm, or
a fingerprint feature recognizable, at the computing device, by a fingerprint recognition algorithm.
20 . The system of claim 15 , wherein the memory device is at least one of:
a secured digital (SD) card,
an SD High-Capacity card,
an SD Extended Capacity (SDXC) card,
an SD Ultra Capacity (SDUC) card,
a Compact Flash (CF) card,
a MicroDrive (MD) card, or
a universal serial bus (USB) drive.