Systems and methods for creating seed and master keys for blockchain wallets from user biometrics
Systems and methods are directed to optimizing a security and recoverability trade-off generally associated with cryptocurrency master key storage. Exemplary embodiments provide a biometrically derived cryptographic seed using a measurement of one or more scale invariant biometric attributes associated with a user. The measured user biometric data is then processed into a repeatable biometric identifier and formatted into a (biometric) cryptographic seed, for derivation of a master extended private key, which may be stored in an HD wallet or used dynamically to conduct a blockchain transaction. The biometric seed and master key generation process may be facilitated by a mobile application responsive to a readout of biometric data from sensors integrated/associated with the mobile device. The captured biometric data may be cryptographically combined with a user-inputted password and/or an authentication data record wirelessly retrieved from an OTP card, to generate a cryptographic seed with greater security attributes.
1. A cryptographic key storage device, comprising:
a processor, one or more biometric data acquisition devices, and a memory containing one or more applications;
wherein the processor is configured to:
authenticate a user,
compute a repeatable biometric number from a measurement of one or more scale invariant biometric data associated with the user,
format the repeatable biometric number into a cryptographic seed, to generate a biometric cryptographic seed, and
derive a private extended master key from the biometric cryptographic seed.
2. The device of claim 1 , wherein the one or more scale invariant biometric data associated with the user further comprises a liveness test data.
3. The device of claim 1 , wherein the one or more scale invariant biometric data are obtained from an image capturing one or more biometric attributes associated with the user.
4. The device of claim 1 , wherein the one or more scale invariant biometric data comprise at least one audio file of a user's voice.
5. The device of claim 1 , wherein the processor is further configured to derive a first portion of a cryptographic seed from the measurement of one or more scale invariant biometric data and a second portion of the cryptographic seed from a user provided input data.
6. The device of claim 5 , wherein the user provided data is acquired via a mobile application running on a mobile device associated with the user.
7. The device of claim 1 , wherein the processor is further configured to grant access to the cryptographic key storage device based on verification of one or more user authentication data.
8. The device of claim 1 , wherein the processor is further configured to generate a distinct biometric cryptographic key based a type of measured biometric data.
9. The device of claim 1 , wherein the measurement of one or more scale invariant biometric data associated with the user comprises multi-spectral imaging of a target biometric attribute.
10. A method of biometrically derived cryptographic seed computation for management of a master private key in hierarchical deterministic (HD) wallets, the method comprising:
performing a measurement of one or more scale invariant biometric data associated with a user;
computing a repeatable biometric number from the measurement of one or more scale invariant biometric data associated with the user;
formatting the repeatable biometric number into a cryptographic seed, to create a biometric cryptographic seed for generation of one or more master cryptographic keys; and
computing the one or more master cryptographic keys from the biometric cryptographic seed.
11. The method of claim 10 , wherein computing the one or more master cryptographic keys comprises processing the biometric cryptographic seed with a hash function.
12. The method of claim 10 , wherein the measurement of the one or more scale invariant biometric data is performed by one or more biometric sensors integrated on a mobile device associated with the user.
13. The method of claim 12 , wherein the biometric cryptographic seed is generated by one or more mobile applications stored on the mobile device, using the measurement of the one or more scale invariant biometric data from the one or more biometric sensors.
14. The method of claim 13 , wherein the computing of the one or more master cryptographic keys from the biometric cryptographic seed is performed by the one or more mobile applications stored on the mobile device.
15. The method of claim 14 , wherein the one or more master cryptographic keys, computed by the one or more mobile applications, is stored on a blockchain wallet.
16. The method of claim 15 , where the blockchain wallet comprises an HD wallet.
17. The method of claim 13 , wherein a distinct biometric cryptographic seed is dynamically generated for a distinct blockchain transaction and a corresponding one or more master cryptographic keys deleted upon completion of the blockchain transaction.
18. The method of claim 13 , where the computing of the one or more master cryptographic keys from the biometric cryptographic seed is performed by one or more corresponding server applications communicatively coupled to the one or more mobile applications running on the mobile device.
19. The method of claim 10 , wherein the biometric cryptographic seed comprises components derived from one or more of a knowledge-based data provided by the user and a secret data stored on a One Time Password (OTP) authentication card associated with the user.
20. A non-transitory computer-readable medium comprising instructions for execution by a computer hardware arrangement, wherein, upon execution of the instructions the computer hardware arrangement is configured to perform procedures comprising:
performing a measurement of one or more scale invariant biometric data associated with a user;
computing a repeatable biometric number from the measurement of one or more scale invariant biometric data associated with the user;
formatting the repeatable biometric number into a cryptographic seed, to create a biometric cryptographic seed for generation of one or more master cryptographic keys; and
computing the one or more master cryptographic keys from the biometric cryptographic seed.