Method and system for identity and access management for blockchain interoperability

1. A method performed by a computerized device of generating hierarchical deterministic wallets for discrete blockchain networks comprising:

receiving a primary seed comprising a parent public key, a parent private key, and a parent chain code at the computerized device;

generating an enhanced hierarchical deterministic wallet at the computerized device by applying a CKD function to the primary seed and deriving an enhanced parent public key and an enhanced parent private key at the computerized device;

receiving a first secondary seed comprising a parent public key, a parent private key, and a parent chain code at the computerized device;

generating a first toughened hierarchical deterministic wallet at the computerized device, comprising:

deriving a first toughened parent public key and a first toughened parent private key by applying a CKD function to the first secondary seed;

deriving a first toughened primary child public key by applying a public CKD function to a combination of the first toughened parent public key, a first parent chain code, and the enhanced parent public key;

deriving a first toughened primary child private key by applying a private CKD function to a combination of the first toughened parent private key, the first parent chain code, and the enhanced parent private key;

generating a first seal contract comprising hashed user data related to a user;

deploying the first seal contract on a user identity management blockchain network, the transaction deploying the first seal contract being signed by the first toughened primary child private key of the first toughened hierarchical deterministic wallet;

receiving from a certification authority an access request for the first seal contract to verify an identity of the user;

sharing the data comprised by the first seal contract with the certification authority to verify the identity of the user;

receiving a certification contract from a certification authority; and

deploying the certification contract on the user identity management blockchain network.

2. The method of claim 1 wherein each of the first toughened primary child public key and the first toughened primary child private key are operable to be exported to the first blockchain network.

3. The method of claim 1 wherein generating the enhanced hierarchical deterministic wallet further comprises:

deriving an enhanced primary child public key from the enhanced parent public key; and

deriving an enhanced primary child private key from the enhanced parent private key.

4. The method of claim 3 wherein at least one of the enhanced primary child public key, enhanced primary child private key, first toughened child public key, and first toughened child private key expires after a length of time.

5. The method of claim 3 wherein at least one of the enhanced primary child public key, enhanced primary child private key, first toughened child public key, and first toughened child private key expires after a number of uses.

6. The method of claim 3 wherein generating the first toughened hierarchical deterministic wallet further comprises:

deriving a first child chain code from a combination of the first toughened parent public key, a first parent chain code, and the enhanced parent public key;

deriving a first toughened secondary child public key from a combination of the first toughened primary child public key, the first child chain code, and the enhanced primary child public key; and

deriving a first toughened secondary child private key from the first toughened primary child private key, the first child chain code, and the enhanced primary child private key.

7. The method of claim 3 wherein generating the enhanced hierarchical deterministic wallet further comprises:

deriving an enhanced secondary child public key from the enhanced primary child public key; and

deriving an enhanced secondary child private key from the enhanced primary child private key.

8. The method of claim 3 wherein generating the first toughened hierarchical deterministic wallet further comprises:

deriving a second toughened primary child public key from a combination of the first toughened parent public key, the first parent chain code, and the enhanced parent public key; and

deriving a second toughened primary child private key from a combination of the first toughened parent private key, the first parent chain code, and the enhanced parent private key.

9. The method of claim 1 wherein generating the first toughened hierarchical deterministic wallet further comprises:

deriving a second toughened secondary child public key that is non-equal to the first toughened secondary child public key by applying a CKD function to a combination of the first toughened primary child public key, a first child chain code, and the enhanced primary child public key; and

deriving a second toughened secondary child private key that is non-equal to the first toughened secondary child private key by applying a CKD function to a combination of the first toughened primary child private key, a second child chain code, and the enhanced primary child private key.

10. The method of claim 1 further comprising:

receiving a second secondary seed comprising a parent public key, a parent private key, and a parent chain code at the computerized device;

generating a second toughened hierarchical deterministic wallet at the computerized device, comprising:

deriving a first toughened parent public key and a first toughened parent private key by applying a CKD function to the second secondary seed;

deriving a first toughened primary child public key that is non-equivalent to the first toughened primary child public key of the first toughened hierarchical deterministic wallet by applying a public CKD function to a combination of the first toughened parent public key of the second toughened hierarchical deterministic wallet, a first parent chain code of the first toughened parent public key of the second toughened hierarchical deterministic wallet, and the enhanced parent public key; and

deriving a first toughened primary child private key that is non- equivalent to the first toughened primary child private key of the first toughened hierarchical deterministic wallet by applying a private CKD function to a combination of the first toughened parent private key of the second toughened hierarchical deterministic wallet, a second parent chain code of the first toughened parent private key of the second toughened hierarchical deterministic wallet, and the enhanced parent private key.

11. The method of claim 10 wherein:

generating the enhanced hierarchical deterministic wallet further comprises:

deriving a first enhanced primary child public key from the enhanced parent public key; and

deriving a first enhanced primary child private key from the enhanced parent private key;

deriving a second enhanced primary child public key from the enhanced parent public key; and

deriving a second enhanced primary child private key from the enhanced parent private key;

wherein the first enhanced primary child public key is non-equal to the second enhanced primary child public key; and

wherein the first enhanced primary child private key is non-equal to the second enhanced primary child private key; and

generating the second toughened hierarchical deterministic wallet further comprises:

deriving a first toughened secondary child public key from a combination of the first toughened primary child public key of the second toughened hierarchical deterministic wallet, a first child chain code of the first toughened primary child public key of the second toughened hierarchical deterministic wallet, and the second enhanced primary child public key; and

deriving a first toughened secondary child private key from the first toughened primary child private key of the second toughened hierarchical deterministic wallet, a second child chain code of the first toughened primary child private key of the second toughened hierarchical deterministic wallet, and the second enhanced primary child private key.

12. The method of claim 1 wherein:

the first toughened primary child public key is derived from the combination of the first toughened parent public key, the first parent chain code, the enhanced parent public key, and an index number; and

the first toughened primary child private key is derived from a combination of the first toughened parent private key, the first parent chain code, the enhanced parent private key, and an index number.

13. The method of claim 1 further comprising:

receiving at the computerized device a certification token generated by a certification authority for the enhanced hierarchical deterministic wallet; and

receiving at the computerized device a certification token generated by the certification authority for the first toughened hierarchical deterministic wallet.

14. The method of claim 10 further comprising:

receiving at the computerized device a certification token generated by a certification authority for the enhanced hierarchical deterministic wallet;

receiving at the computerized device a certification token generated by the certification authority for the first toughened hierarchical deterministic wallet; and

receiving at the computerized device a certification token generated by the certification authority for the second toughened hierarchical deterministic wallet.

15. A method performed by a computerized device of generating wallets for discrete blockchain networks comprising:

receiving a primary seed comprising of a parent public key, a parent private key, and a parent chain code at the computerized device;

generating an enhanced hierarchical deterministic wallet at the computerized device by applying a CKD function to the primary seed and deriving an enhanced parent public key and an enhanced parent private key at the computerized device;

receiving a first secondary seed comprising of a parent public key, a parent private key, and a parent chain code at the computerized device;

generating a first toughened hierarchical deterministic wallet at the computerized device, comprising:

deriving a first toughened parent public key and a first toughened parent private key by applying a CKD function to the first secondary seed;

deriving a first toughened primary child public key by applying a CKD function to a combination of the first toughened parent public key, a first parent chain code, and the enhanced parent public key;

deriving a first toughened primary child private key by applying a CKD function to a combination of the first toughened parent private key, the first parent chain code, and the enhanced parent private key; and

generating a first seal contract comprising hashed user data related to a user;

deploying the first seal contract on an user identity management blockchain, the transaction deploying the first seal contract being signed by the first toughened primary child private key of the first toughened hierarchical deterministic wallet;

receiving an access request from a certification authority for the first seal contract to verify an identity of the user;

sharing the data comprised by the first seal contract with the certification authority to verify the identity of the user;

receiving a second secondary seed comprising a parent public key, a parent private key, and a parent chain code at the computerized device; and

generating a second toughened hierarchical deterministic wallet at the computerized device, comprising:

deriving a first toughened parent public key and a first toughened parent private key by applying a CKD function to the second secondary seed;

deriving a first toughened primary child public key that is non- equivalent to the first toughened primary child public key of the first toughened hierarchical deterministic wallet by applying a CKD function to a combination of the first toughened parent public key of the second toughened hierarchical deterministic wallet, a first parent chain code of the first toughened parent public key of the second toughened hierarchical deterministic wallet, and the enhanced parent public key;

deriving a first toughened primary child private key that is non-equivalent to the first toughened primary child private key of the first toughened hierarchical deterministic wallet by applying a CKD function to a combination of the first toughened parent private key of the second toughened hierarchical deterministic wallet, a second parent chain code of the first toughened parent private key of the second toughened hierarchical deterministic wallet, and the enhanced parent private key;

generating a second seal contract comprising hashed user data related to the user; and

deploying the second seal contract on the user identity management blockchain, the transaction deploying the second seal contract being signed by the first toughened primary child private key of the second toughened hierarchical deterministic wallet

16. The method of claim 15 wherein generating the enhanced hierarchical deterministic wallet further comprises:

deriving an enhanced primary child public key from the enhanced parent public key; and

deriving an enhanced primary child private key from the enhanced parent private key.

17. The method of claim 16 wherein generating the first toughened hierarchical deterministic wallet further comprises:

deriving a first child chain code from a combination of the first toughened parent public key, a first parent chain code, and the enhanced parent public key

deriving a first toughened secondary child public key from a combination of the first toughened primary child public key, the first child chain code, and the enhanced primary child public key; and

deriving a first toughened secondary child private key from a combination of the first toughened primary child private key, the first child chain code, and the enhanced primary child private key.

18. The method of claim 15 further comprising:

receiving at the computerized device a certification token generated by a certification authority for the enhanced hierarchical deterministic wallet;

receiving at the computerized device a certification token generated by the certification authority for the first toughened hierarchical deterministic wallet at the computerized device; and

receiving at the computerized device a certification token generated by the certification authority for the second toughened hierarchical deterministic wallet at the computerized device.