Granted Patent B2

US 12,580,760 · App. 16/649,514 · Granted Mar 17, 2026

Inventor: Thomas Trevethan (London, GB)

Assignee: NCHAIN LICENSING AG

H04L9/14G06Q10/10G06Q20/085G06Q20/108G06Q20/1235G06Q20/38215G06Q20/3829G06Q20/401G06Q30/0185G06Q40/02H04L9/085H04L9/0861H04L9/30H04L9/3242G06Q2220/00H04L9/50H04L2209/16H04L2209/56

Abstract

Claims (78)

1 . A computer-implemented method comprising:

communicating, by at least one of a plurality of members, to a set of counterparties, assent to determine an outcome of a set of conditions, the set of conditions having a first possible outcome and a second possible outcome;

generating, by at least one of the plurality of members, using a secret sharing protocol, a first private key share corresponding to the first possible outcome and a second private key share corresponding to the second possible outcome;

transferring, by at least one of the plurality of members, an amount of a digital asset to an address associated with a first blockchain transaction;

cooperating in determining the outcome to be the first possible outcome, wherein a threshold number of said first private key shares is usable, at least in part, to determine the outcome;

revealing the first private key share within a particular time frame;

generating, based at least in part on the threshold number of first private key shares, a signature usable at least in part to validate a second blockchain transaction for unlocking the amount of the digital asset associated with the first blockchain transaction, wherein at least part of the amount of the digital asset associated with the first blockchain transaction is distributed to at least one of the plurality of members on the basis of said revealed first private key share; and

causing the second blockchain transaction to be validated at a node in a blockchain network.

2 . The computer-implemented method according to claim 1 , wherein: the computer-implemented method further comprises:

generating a first public key associated with the first possible outcome and a second public key associated with the second possible outcome;

providing the first public key and the second public key to the set of counterparties;

the first private key share is usable to determine the outcome by: generating, at least in part using the first private key share, a first private key; and

determining that the first private key is associated with the first public key.

3 . The computer-implemented method according to claim 1 , wherein the secret sharing protocol is a dealer-free secret sharing protocol.

4 . The computer-implemented method according to claim 1 , wherein:

the first blockchain transaction further includes a second amount of a second digital asset transferred from a subset of the set of counterparties; and

the method further comprises transferring control of the second amount of the second digital asset further as a result of causing the second blockchain transaction to be validated.

5 . The computer-implemented method according to claim 4 , wherein:

the first blockchain transaction further includes a timeout condition; and

as a result of fulfilment of the timeout condition, causing the second blockchain transaction to be validated transfers control of the second amount of the second digital asset to the subset of the set of counterparties.

6 . The computer-implemented method according to claim 4 , wherein:

validation of the second blockchain transaction includes validating a digital signature generated using a group cryptographic key, the group cryptographic key associated with a group of participants that have assented to determine the outcome;

the group of participants include:

a first subset of participants that reveal key shares corresponding to the first possible outcome; and

a second subset of participants that reveal key shares corresponding to the second possible outcome; and

transferring control of the second amount includes transferring control of the second amount to the first subset of participants, excluding the second subset of participants.

7 . The computer-implemented method according to claim 1 , wherein validation of the second blockchain transaction includes validating a digital signature generated using a group cryptographic key, the group cryptographic key associated with a group of participants that have assented to determine the outcome.

8 . The computer-implemented method according to claim 7 , wherein: the computer-implemented method further comprises:

generating a group public key associated with the group of participants;

providing the group public key to the set of counterparties;

the first blockchain transaction is created, at least in part, using the group public key; and

the validation of the second blockchain transaction includes determining that the group cryptographic key is associated with the group public key of the first blockchain transaction.

9 . The computer-implemented method according to claim 7 , further comprising:

generating, using the secret sharing protocol, a group private key share; and

further as a result of determining the outcome, generating the group cryptographic key based at least in part on the group private key share.

10 . The computer-implemented method according to claim 7 , wherein:

the first private key share belongs to a plurality of first private key shares distributed among the group of participants, the first private key shares corresponding to the first possible outcome; and

determining the outcome to be the first possible outcome includes determining that a threshold number of the plurality of first private key shares have been revealed by the group of participants.

11 . The computer-implemented method according to claim 1 , wherein revealing the first private key share includes revealing the first private key share in a third blockchain transaction.

12 . The computer-implemented method according to claim 11 , wherein the third blockchain transaction is a transaction in a proof-of-stake blockchain.

13 . The computer-implemented method according to claim 12 , wherein:

the particular time frame is a second time frame; and

revealing the first private key share further includes:

committing a cryptographic hash of the first private key share in a commit transaction within a first time frame, previous to the second time frame; and

validating the third blockchain transaction includes determining that the first private key share in the third blockchain transaction corresponds to the cryptographic hash in the commit transaction.

14 . A system, comprising:

a processor; and

memory including executable instructions that, as a result of execution by the processor, causes the system to execute operations, the operations comprising:

communicating, by at least one of a plurality of members, to a set of counterparties, assent to determine an outcome of a set of conditions, the set of conditions having a first possible outcome and a second possible outcome;

generating, by at least one of the plurality of members, using a secret sharing protocol, a first private key share corresponding to the first possible outcome and a second private key share corresponding to the second possible outcome;

transferring, by at least one of the plurality of members, an amount of a digital asset to an address associated with a first blockchain transaction;

cooperating in determining the outcome to be the first possible outcome, wherein a threshold number of said first private key shares is usable, at least in part, to determine the outcome;

revealing the first private key share within a particular time frame;

generating, based at least in part on the threshold number of first private key shares, a signature usable at least in part to validate a second blockchain transaction for unlocking the amount of the digital asset associated with the first blockchain transaction, wherein at least part of the amount of the digital asset associated with the first blockchain transaction is distributed to at least one of the plurality of members on the basis of said revealed first private key share; and

causing the second blockchain transaction to be validated at a node in a blockchain network.

15 . The system of claim 14 , wherein the operations further comprise:

generating a first public key associated with the first possible outcome and a second public key associated with the second possible outcome;

providing the first public key and the second public key to the set of counterparties;

the first private key share is usable to determine the outcome by: generating, at least in part using the first private key share, a first private key; and

determining that the first private key is associated with the first public key.

16 . The system of claim 14 , wherein the secret sharing protocol is a dealer-free secret sharing protocol.

17 . The system of claim 14 , wherein:

the first blockchain transaction further includes a second amount of a second digital asset transferred from a subset of the set of counterparties; and

the operations further comprise transferring control of the second amount of the second digital asset further as a result of causing the second blockchain transaction to be validated.

18 . A non-transitory computer-readable storage medium having stored thereon executable instructions that, as a result of being executed by a processor of a computer system, cause the computer system to execute operations, the operations comprising:

communicating, by at least one of a plurality of members, to a set of counterparties, assent to determine an outcome of a set of conditions, the set of conditions having a first possible outcome and a second possible outcome;

generating, by at least one of the plurality of members, using a secret sharing protocol, a first private key share corresponding to the first possible outcome and a second private key share corresponding to the second possible outcome;

transferring, by at least one of the plurality of members, an amount of a digital asset to an address associated with a first blockchain transaction;

cooperating in determining the outcome to be the first possible outcome, wherein a threshold number of said first private key shares is usable, at least in part, to determine the outcome;

revealing the first private key share within a particular time frame;

generating, based at least in part on the threshold number of first private key shares, a signature usable at least in part to validate a second blockchain transaction for unlocking the amount of the digital asset associated with the first blockchain transaction, wherein at least part of the amount of the digital asset associated with the first blockchain transaction is distributed to at least one of the plurality of members on the basis of said revealed first private key share; and

causing the second blockchain transaction to be validated at a node in a blockchain network.

19 . The non-transitory computer-readable storage medium of claim 18 , wherein the operations further comprise:

generating a first public key associated with the first possible outcome and a second public key associated with the second possible outcome;

providing the first public key and the second public key to the set of counterparties;

the first private key share is usable to determine the outcome by: generating, at least in part using the first private key share, a first private key; and

determining that the first private key is associated with the first public key.

20 . The non-transitory computer-readable storage medium of claim 18 , wherein the secret sharing protocol is a dealer-free secret sharing protocol.

Assignments (5)

Priority Claims (2)

Continuity (1)

References Cited (118)