Multi-address population based on single address
A physical card (in some cases without any on-board source of power or computing capabilities) is configured to maintain access information for digital bearer assets. The physical card may include disposed thereon a single address operable to receive digital bearer assets in one or more transactions on a decentralized computing platform, like a blockchain-based decentralized computing platform. Other decentralized computing platforms utilize different address generation protocols, thus preventing use of a single address on those other platforms. A set of addresses is generated, each address corresponding to a given decentralized computing platform. Each address is based on a same underlying key-pair, and a primary address is selected from the set for a given card. The remaining addresses in the set are stored, without storage of the public key or private key, and returned in a response to a request for additional addresses of the currency card.
1. A method, comprising:
generating, with a first computer system, an intermediate code based on a passphrase, the intermediate code configured to encrypt plaintexts to form ciphertexts that are decryptable based on the passphrase;
obtaining, with a second computer system that is not the first computer system, the intermediate code and a private cryptographic key of a public-private cryptographic key pair, the public-private cryptographic key pair comprising a public cryptographic key that corresponds to a wallet address of a decentralized computing platform;
forming, with the second computer system, an encrypted-private-key ciphertext by encrypting the private cryptographic key based on the intermediate code without using the passphrase;
disposing, with a first device, the encrypted-private-key ciphertext on a first substrate, wherein:
the encrypted-private-key ciphertext does not reveal the private cryptographic key, and
the encrypted-private-key ciphertext is decryptable with the passphrase to reveal the private cryptographic key in plaintext;
disposing, with a second device that is not the first device, the passphrase on a second substrate;
concealing, with a tamper-evident feature, at least one of the passphrase disposed on the second substrate or the encrypted-private-key ciphertext disposed on the first substrate;
after concealing the passphrase printed disposed on the second substrate or the encrypted-private-key ciphertext disposed on the first substrate with a tamper-evident mask, obtaining the first substrate and the second substrate; and
attaching the first substrate to the second substrate.
2. The method of claim 1 , wherein:
the first substrate or the second substrate is a metal card.
3. The method of claim 2 , wherein:
the encrypted-private-key ciphertext or the passphrase is disposed on the metal card by an engraving device.
4. The method of claim 1 , wherein concealing, with a tamper-evident feature, at least one of the passphrase disposed on the second substrate or the encrypted-private-key ciphertext disposed on the first substrate comprises:
concealing the passphrase with a tamper-evident mask, or
concealing the encrypted-private-key ciphertext with a tamper-evident component of a sticker.
5. The method of claim 1 , wherein concealing, with a tamper-evident feature, at least one of the passphrase disposed on the second substrate or the encrypted-private-key ciphertext disposed on the first substrate comprises:
concealing the passphrase with a tamper-evident mask, and
concealing the encrypted-private-key ciphertext with a tamper-evident component of a sticker.
6. The method of claim 1 , wherein concealing, with a tamper-evident feature, at least one of the passphrase disposed on the second substrate or the encrypted-private-key ciphertext disposed on the first substrate comprises:
concealing, with a first tamper-evident feature, the passphrase, and
concealing, with a second tamper-evident feature, the encrypted-private-key ciphertext.
7. The method of claim 1 , wherein:
the first substrate is a multi-component sticker;
the encrypted-private-key ciphertext is disposed on a bottom sticker component of the multi-component sticker by a printing device;
a tamper-evident top sticker component of the multi-component sticker comprises the tamper-evident feature and conceals the encrypted-private-key ciphertext disposed on the bottom sticker component; and
an optical code encoding a value associated with the wallet address of the decentralized computing platform is disposed on the top sticker component by the same or a different printing device.
8. The method of claim 1 , wherein:
the first substrate is a first component of a multi-component sticker;
the second substrate is a card; and
concealing, with a tamper-evident feature, at least one of the passphrase disposed on the second substrate or the encrypted-private-key ciphertext disposed on the first substrate comprises one or both of:
concealing the passphrase with a tamper-evident mask comprising a first tamper-evident feature; and
concealing the encrypted-private-key ciphertext with a second, tamper-evident, component of the multi-component sticker comprising a second tamper-evident feature.
9. The method of claim 1 , wherein:
generating the intermediate code comprises generating a proxy re-encryption code.
10. The method of claim 1 , wherein:
the encrypted-private-key ciphertext is not decryptable with the intermediate code to reveal the private cryptographic key in plaintext.
11. A method, comprising:
obtaining, with a computer system, an intermediate code generated based on a passphrase, and a private cryptographic key of a public-private cryptographic key pair, wherein:
the computer system does not have access to the passphrase,
the intermediate code does not reveal the passphrase, and
the intermediate code is configured to be used to encrypt plaintexts to form ciphertexts that are decryptable with the passphrase, and
the public-private cryptographic key pair comprises a public cryptographic key that corresponds to a wallet address of a decentralized computing platform;
forming, with the computer system, an encrypted-private-key ciphertext by encrypting the private cryptographic key with the intermediate code;
disposing the encrypted-private-key ciphertext on a first substrate, wherein:
the encrypted-private-key ciphertext does not reveal the private cryptographic key, and
the encrypted-private-key ciphertext is decryptable with the passphrase to reveal the private cryptographic key in plaintext;
disposing, by a different system at a different geolocation from where the disposing of the encrypted-private-key ciphertext on the first substrate occurs, the passphrase on a second substrate;
concealing, with a tamper-evident feature, at least one of the passphrase disposed on the second substrate or the encrypted-private-key ciphertext disposed on the first substrate;
after concealing the passphrase disposed on the second substrate or the encrypted-private-key ciphertext disposed on the first substrate with a tamper-evident mask,
obtaining the first substrate and the second substrate at the same geolocation; and
attaching the first substrate to the second substrate.
12. The method of claim 11 , wherein:
the first substrate or the second substrate is a metal card.
13. The method of claim 12 , wherein:
the encrypted-private-key ciphertext or the passphrase is disposed on the metal card by an engraving system.
14. The method of claim 11 , wherein:
people and computer systems with access to the passphrase do not have access to the encrypted-private-key ciphertext without tampering with the tamper-evident mask; or
people and computer systems with access to the encrypted-private-key ciphertext do not have access to the passphrase without tampering with the tamper-evident mask.
15. The method of claim 11 , wherein:
the computing system is a first computing system in a first geolocation that is in a first county;
the different computing system is second computing system in a second geolocation that is in a second country that is different from the first country;
disposing the encrypted-private-key ciphertext does not occur in the second country; and
disposing the passphrase on the second substrate does not occur in the first country.
16. The method of claim 11 , wherein:
the first substrate with the encrypted-private-key ciphertext and the second substrate with the passphrase are not in the same country before concealing, with the tamper-evident feature, the passphrase disposed on the second substrate or the encrypted-private-key ciphertext disposed on the first substrate.
17. The method of claim 11 , wherein:
the first substrate is a multi-component sticker;
the encrypted-private-key ciphertext is disposed on a bottom sticker component of the multi-component sticker by a printing system;
a tamper-evident top sticker component of the multi-component sticker comprises the tamper-evident feature and conceals the encrypted-private-key ciphertext disposed on the bottom sticker component; and
an optical code encoding a value associated with the wallet address of the decentralized computing platform is disposed on the top sticker component by the same or a different printing system.
18. The method of claim 11 , wherein:
the first substrate is a first component of a multi-component sticker;
the second substrate is a card; and
concealing, with a tamper-evident feature, at least one of the passphrase disposed on the second substrate or the encrypted-private-key ciphertext disposed on the first substrate comprises one or both of:
concealing the passphrase with a tamper-evident mask comprising a first tamper-evident feature, and
concealing the encrypted-private-key ciphertext with a second, tamper-evident, component of the multi-component sticker comprising a second tamper-evident feature.
19. The method of claim 11 , wherein:
generating the intermediate code comprises generating a proxy re-encryption code.
20. The method of claim 11 , wherein:
the encrypted-private-key ciphertext is not decryptable with the intermediate code to reveal the private key in plaintext.
21. The method of claim 11 , wherein concealing, with a tamper-evident feature, at least one of the passphrase disposed on the second substrate or the encrypted-private-key ciphertext disposed on the first substrate comprises:
concealing the passphrase with a tamper-evident mask, or
concealing the encrypted-private-key ciphertext with a tamper-evident component of a sticker.
22. The method of claim 11 , wherein concealing, with a tamper-evident feature, at least one of the passphrase disposed on the second substrate or the encrypted-private-key ciphertext disposed on the first substrate comprises:
concealing the passphrase with a tamper-evident mask, and
concealing the encrypted-private-key ciphertext with a tamper-evident component of a sticker.
23. The method of claim 11 , wherein concealing, with a tamper-evident feature, at least one of the passphrase disposed on the second substrate or the encrypted-private-key ciphertext disposed on the first substrate comprises:
concealing, with a first tamper-evident feature, the passphrase, and
concealing, with a second tamper-evident feature, the encrypted-private-key ciphertext.