Securing distributed electronic wallet shares
Methods and systems are provided for securing distributed shares of an electronic wallet. An example method includes provisioning a plurality of devices each hosting an e-wallet share with enhanced privacy identification (EPID) private keys for the e-wallet share. A signature is posted for the e-wallet share to a blockchain. A determination is made as to whether the e-wallet share is compromised, and, if so, posting a revocation list comprising the signature for the e-wallet share to a blockchain.
1. An apparatus for securing distributed electronic wallet shares, comprising:
a processor;
storage to store instructions to direct the processor to: create an e-wallet;
create the distributed e-wallet shares;
provision each of the distributed e-wallet shares with extended privacy identification (EPID) keys and a balance;
join the distributed e-wallet shares to the e-wallet; and
divide a transaction into a plurality of fractional transactions that are each assigned to one of the e-wallet shares;
an EPID server configured to generate EPID keys for the e-wallet and the e-wallet shares; and
a fractional key manager configured to direct the processor to sign each of the plurality of fractional transactions with a corresponding EPID key for an e-wallet share assigned to a fractional transaction.
2. The apparatus of claim 1 , comprising a revocation list comprising credentials for revoked e-wallet shares, the instructions to direct the processor to enter credentials for revoked e-wallet shares into the revocation list based, at least in part, on input from a user.
3. The apparatus of claim 1 , comprising a touchscreen configured to obtain user input.
4. The apparatus of claim 1 , comprising a blockchain configured to hold transactions comprising e-wallet shares.
5. The apparatus of claim 4 , comprising miners configured to examine the blockchain to verify transactions.
6. The apparatus of claim 1 , the instructions to direct the processor to: issue a wake-up message from a transacting share to other e-wallet shares; and send a balance synchronization message to the other e-wallet shares.
7. The apparatus of claim 6 , the instructions to direct the processor to:
send an acknowledgment message from the other e-wallet shares after receiving a balance synchronization message; and
adjust a balance in an e-wallet, share based, at least in part, on the received balance synchronization message.
8. An apparatus for securing multiple distributed e-wallet shares, comprising:
a processor;
storage to store instructions to direct the processor to: create an e-wallet; create distributed e-wallet shares;
provision the distributed e-wallet shares with extended privacy identification (EPID) keys and a balance; and
divide a transaction into a plurality of fractional transactions that are each assigned to one of the e-wallet shares;
a means to join the distributed e-wallet shares to the e-wallet;
an EPID server configured to generate EPID keys for the e-wallet and the e-wallet shares; and
a fractional key manager configured to direct the processor to sign each of the plurality of fractional transactions with a corresponding EPID key for an e-wallet share assigned to a fractional transaction.
9. The apparatus of claim 8 , comprising a means for communicating a revocation of e-wallet shares.
10. The apparatus of claim 8 , comprising a means for synchronizing balances among the distributed e-wallet shares.
11. The apparatus of claim 8 , comprising a means to share the cost of a transaction among the distributed e-wallet shares.