IP Library Granted Patent US 11,870,894
Granted Patent B2
US 11,870,894 · App. 17/738,895 · Granted Jan 9, 2024

Controlled cryptographic private key release

Inventors: John Fletcher (Cambridge, GB); Thomas Trevethan (London, GB)
Assignee: nChain Licensing AG
H04L9/085H04L9/30H04L9/3213H04L9/3247
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,870,894
App. No.
17/738,895
Granted
Jan 9, 2024
Kind
B2
Abstract

A computer-implemented method includes: storing an encryption public key that is associated with a group of nodes, each node in the group associated with a private key share, the private key shares associated with a threshold private key reconstruction scheme for the group to allow an encryption private key associated with the encryption public key to be determined from at least a threshold of the private key shares; iteratively obtaining a plurality of indicators provided by a plurality of nodes of the group, each of the indicators representing one of an encryption private key share or a dummy signal; and identifying the encryption private key by iteratively: i) selecting a subset of the indicators; ii) calculating a possible shared secret; and iii) evaluating each possible shared secret against the encryption public key to determine whether the possible shared secret is the encryption private key. The invention is suited for implementation on a blockchain.

Claims (19)

1. A computer-implemented method comprising:

storing an encryption public key that is associated with a group of nodes, each node in the group associated with a private key share, the private key shares associated with a threshold private key reconstruction scheme for the group to allow an encryption private key associated with the encryption public key to be determined from at least a threshold of the private key shares, wherein the private key shares are released by the group of nodes when a predetermined or specified event is detected by at least one node in the group of nodes; and

iteratively obtaining a plurality of indicators provided by a plurality of nodes of the group, each of the indicators representing one of an encryption private key share or a dummy signal; and identifying the encryption private key by iteratively:

selecting a subset of the indicators;

calculating a possible shared secret; and

evaluating each possible shared secret against the encryption public key to determine whether the possible shared secret is the encryption private key, wherein the method further comprises identifying nodes of the group that provided an indicator representing an encryption private key share in a defined window of opportunity; and cooperatively generating a valid signature for a transaction to transfer one or more digital assets to one or more of the identified nodes.

2. The computer-implemented method of claim 1 , further comprising:

when the possible shared secret is determined to be the encryption private key, decrypting data previously encrypted with the encryption public key.

3. The computer-implemented method of claim 1 , further comprising:

when the possible shared secret is determined to be the encryption private key:

generating a signature based on the encryption private key; and adding the signature to an unlocking script of a transaction to unlock a token previously encumbered with the encryption public key.

4. The computer-implemented method of claim 1 , wherein cooperatively generating a valid signature for a transaction to transfer one or more digital assets to one or more of the identified nodes comprises cooperatively generating a valid signature to distribute one or more tokens provided by a requestor that issued a monitoring request associated with an event.

5. The computer-implemented method of claim 1 , further comprising:

determining that one of the nodes of the group has breached a protocol by providing an associated private key share in a plurality of indicators; and in response to determining that one of the nodes of the group has breached the protocol, cooperating with other nodes of the group to confiscate a stake of that one of the nodes of the group.

6. A non-transitory computer readable storage medium comprising computer-executable instructions that, when executed by a processor, cause the processor to perform the method of claim 1 .

7. An electronic device comprising:

an interface device;

a processor coupled to the interface device; and

a memory coupled to the processor, the memory having stored thereon computer-executable instructions which, when executed, configure the processor to perform the method of claim 1 .

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 6, 2022
From: FLETCHER, JOHN; TREVETHAN, THOMAS
To: NCHAIN HOLDINGS LTD.
Reel/Frame 059864/0048 →
CHANGE OF NAME Recorded May 6, 2022
From: NCHAIN HOLDINGS LTD
To: NCHAIN LICENSING AG
Reel/Frame 059908/0687 →
Priority Claims (1)
GB 1710176 · Jun 26, 2017 · national
Continuity (2)
Continuation 16626294
Related Publication 20220337399A1 · Oct 20, 2022
Cited By (1)
US 12,470,374