Extending a secure key storage for transaction confirmation and cryptocurrency
A system, apparatus, method, and machine readable medium are described for secure authentication. For example, one embodiment of a system comprises: an authenticator on a client device to securely store one or more private keys, at least one of the private keys usable to authenticate a block of a blockchain; and an attestation module of the authenticator or coupled to the authenticator, the attestation module to generate a signature using the block and the private key, the signature usable to attest to the authenticity of the block by a device having a public key corresponding to the private key.
1. A method comprising:
securely storing one or more private keys in an authenticator of a client device, at least one of the private keys usable to authenticate one or more blocks of a blockchain;
generating a signature by an attestation module that is part of, or coupled to, the authenticator, the signature generated by signing a concatenation of a first block of the blockchain and model data relating to the authenticator including a firmware version of the authenticator usable to indicate one or more capabilities of the authenticator, the signature usable by a relying party to attest to the authenticity of the first block and the model data by using a public key corresponding to the private key;
generating a signed object by the attestation module, the signed object comprising the first block, the model data, and the signature;
securely transmitting the signed object from the authenticator to the relying party;
decrypting the signature in the signed object to generate decrypted first block and decrypted model data using the public key;
authenticating the first block and the model data in the signed object through a comparison with the decrypted first block and the decrypted model data; and
responsive to a positive authentication of the first block and the model data, determining one or more capabilities of the authenticator based on the firmware version of the authenticator in the model data or the decrypted model data.
2. The method of claim 1 , wherein the first block represents currency and/or a transaction in a cryptocurrency system.
3. The method of claim 2 , wherein the cryptocurrency system comprises a Bitcoin cryptocurrency system.
4. The method of claim 2 , wherein the attestation module is configured to generate a signature for a cryptocurrency transaction to be applied to the cryptocurrency system.
5. The method of claim 4 , wherein the authenticator includes secure transaction circuitry to securely display valid information related to the cryptocurrency transaction to a user.
6. The method of claim 1 , further comprising:
performing key pair generation of the private key and the public key corresponding to the private key.
7. The method of claim 1 , wherein an identity of a user is to be authenticated by an authentication circuitry of the authenticator.
8. The method of claim 7 , wherein the authenticator includes or is communicatively coupled to one or more biometric sensors to read biometric data to verify the user.
9. The method of claim 8 , wherein the biometric sensors comprise fingerprint sensors, microphones, and/or cameras.
10. The method of claim 9 , further comprising:
capturing, by a camera, a sequence of images which include the user's eyes as one or more screen layouts are displayed in response to a request to authenticate a user; and
performing, by an eye tracking module eye movement detection across the sequence of images to identify a correlation between motion of the user's eyes as the one or more screen layouts are presented and an expected motion of the user's eyes as the one or more screen layouts are presented.
11. The method of claim 10 , further comprising:
determining, by a voice recognition module, a correlation between captured audio of the user's voice and one or more voice prints.
12. The method of claim 11 , further comprising:
performing, by a facial recognition engine, facial recognition to identify a correlation between one or more images of the user's face and facial template data associated with the user.
13. The method of claim 12 , wherein performing the facial recognition further comprises:
generating an assurance level based on one or more of: (a) the correlation between the images of the user's face and facial template data associated with the user, (b) the correlation between the motion of the user's eyes and an expected motion of the user's eyes as the one or more screen layouts are presented; and (c) the correlation between the captured audio of the user's voice and the one or more voice prints.
14. The method of claim 1 , wherein the private key comprises one of a public/private key pair, the public key being stored on the relying party.
15. The method of claim 1 , further comprising:
storing and publishing, by a publicly-readable storage device, the signature either as part of the blockchain or separately from the blockchain.
16. The method of claim 15 , further comprising:
storing, by a metadata storage, authenticator metadata related to authenticator models, the metadata storage to store the model data related to the authenticator.
17. The method of claim 16 , wherein the authenticator metadata comprises metadata statements associated indicating specific authenticator characteristics used for ledger transactions.