Methods and apparatus for providing blockchain participant identity binding
A method and apparatus provides a blockchain that includes one or more blocks that contain a cryptographic binding of a signature-verification public key and/or a data encryption public key to the identity of the holder of the corresponding private key. The binding is performed by one or more key binding entities, referred to herein as a blockchain identity binder. Originators and recipients use the identity binding data to secure block chain transactions.
1. A method carried out by an apparatus operative to access blockchain data in a blockchain, the method comprising:
requesting, by a recipient, signed blockchain recipient identity binding data from a trusted binding entity;
receiving the signed blockchain recipient identity binding data comprising a public verification key of the trusted binding entity;
searching for one or more transaction blocks intended for the recipient in a blockchain based on recipient identification information; and
determining, from one or more blocks in the blockchain, an originator identity corresponding to an originator of a transaction, based on signed blockchain participant identity binding data that was issued by the same trusted binding entity, that comprises a cryptographically signed public key of the originator and corresponding participant identity information associated with the originator;
verifying that the signed blockchain participant identity binding data is signed by the trusted binder entity using the public verification key associated with the trusted binder entity;
when verified, using the public key of the originator from the signed blockchain participant identity binding data to verify a transaction from a block in the blockchain.
2. An apparatus operative to access blockchain data in a blockchain comprising:
one or more processors: and
memory comprising executable instructions that when executed by the one or more processors cause the one or more processors to:
request blockchain recipient identity binding data from a trusted binding entity;
receive the signed blockchain recipient identity binding data comprising a public verification key of the trusted binding entity;
search for one or more transaction blocks intended for a recipient in a blockchain based on recipient identification information;
determine, from one or more blocks in the blockchain, an originator identity corresponding to an originator of a transaction, based on signed blockchain participant identity binding data that comprises a cryptographically signed public key of the originator and corresponding participant identity information associated with the originator;
verify that the signed blockchain participant identity binding data is signed by the trusted binder entity using the public key verification key associated with the trusted binder entity; and
when verified, use the public key of the originator from the signed blockchain participant identity binding data to verify a transaction from a block in the blockchain.