Non-custodial tool for building decentralized computer applications
A mechanism for building decentralized computer applications that execute on a distributed computing system. The present technology works within a web browser, client application, or other software and provides access to decentralized computer applications through the browser. The present technology is non-custodial, wherein a public-private key pair, which represents user identity, is created on a client machine and then directly encrypted by a third-party platform without relying on one centralized computing system.
1. A method for signing transaction data for a decentralized application transaction, the method comprising:
receiving, by a first computing environment, an access token that corresponds to a user authentication by a second computing environment, to sign transaction data for a decentralized application transaction
sending a request bypassing the second computing environment, by the first computing environment to access a decrypted version of a private key information from a third party security system, wherein the private key information is encrypted using the third party security system;
receiving, in response to the request, the decrypted version of the private key information at the first computing environment from the third party security system;
signing, by the first computing environment, the transaction data with the decrypted version of the private key information; and
sending, by the first computing environment, the signed transaction data for submission to a decentralized network;
wherein the third party security system includes an access token service;
wherein sending the request, bypassing the second computing environment, by the first computing environment to access a decrypted version of the private key information includes sending a message that includes the access token by the first computing environment to the access token service.
2. The method of claim 1 , further including:
receiving, at the first computing environment, a request to sign the transaction data.
3. The method of claim 1 ,
wherein the transaction data includes a network message payload.
4. The method of claim 1 ,
wherein the decentralized network is a blockchain service.
5. The method of claim 1 ,
wherein the third party security system includes a hardware security module; and
wherein sending the request, bypassing the second computing environment, by the first computing environment to access a decrypted version of the private key information includes sending a message by the first computing environment to the hardware security module.
6. The method of claim 1 ,
wherein the third party security system includes a hardware security module;
wherein receiving the access token at the first computing environment includes receiving the access token from the access token service; and
wherein sending the request, bypassing the second computing environment, by the first computing environment to access a decrypted version of the private key information includes sending a message that includes a scoped credential, by the first computing environment to the hardware security module.
7. The method of claim 1 , further including:
generating the key information at the first computing environment; and
sending the key information by the first computer to the third party security system.
8. The method of claim 1 ,
wherein the first computing environment includes a network browser that includes an iframe.
9. The method of claim 1 ,
wherein signing, by the first computing environment, the transaction data with the decrypted key information includes signing using the decrypted key information within an iframe at the first computing environment.
10. The method of claim 1 ,
wherein sending, by the first computing environment, the signed transaction data for submission to the decentralized network, includes sending the signed transaction data to the second computing environment for submission to the decentralized network.
11. A non-transitory computer readable storage medium having embodied thereon a program, the program, when executed by at least one processor causes the at least one processor to:
receive, by a first computing environment, an access token that is associated with a user authentication by a second computing environment, to sign transaction data for a decentralized application transaction;
send one or more requests bypassing the second computing environment, by the first computing environment to access decrypted key information associated with a private key from a third party security service, wherein the private key information is encrypted using the third party security service system;
receive, in response to the request, the decrypted key information associated with the private key information at the first computing environment from the third party security system;
sign using, by the first computing environment, the transaction data with the decrypted version of the private key information; and
send, by the first computing environment, the signed transaction data for submission to a decentralized network;
wherein the third party security system includes an access token service; and
wherein sending the request, bypassing the second computing environment, by the first computing environment to access the decrypted version of the private key information includes sending the access token by the first computing environment to the access token service.
12. The non-transitory computer readable storage medium of claim 11 , further including:
receive, at the first computing environment, a request to sign the transaction data.
13. The non-transitory computer readable storage medium of claim 11 , wherein the decentralized network is a blockchain service.
14. The non-transitory computer readable storage medium of claim 11 , further including:
wherein the third party security system includes a hardware security module; and
wherein the request, bypassing the second computing environment, by the first computing environment to access the decrypted version of the private key information includes sending the request by the first computing environment to the hardware security module.
15. The non-transitory computer readable storage medium of claim 11 , further including:
generating the private key information at the first computing environment; and
sending the private key information by the first computing environment to the third party security system.
16. The non-transitory computer readable storage medium of claim 11 ,
wherein signing, by the first computing environment, the transaction data with the decrypted private key information includes signing using the decrypted key information within an iframe at the first computing environment.
17. The non-transitory computer readable storage medium of claim 11 ,
wherein sending, by the first computing environment, the signed transaction data for submission to the decentralized network, includes sending the signed transaction data to the second computing environment for submission to the decentralized network.
18. A system including:
processing circuitry;
a memory operably coupled to the processing circuitry, that stores instructions which, when executed by the processing circuitry, cause the processing circuitry to perform operations comprising:
receiving, by a first computing environment, an access token that corresponds to a user authentication by a second computing environment, to sign transaction data for a decentralized application transaction
sending a request bypassing the second computing environment by the first computing environment to access decrypted private user information from a third party security system, wherein the private user information is encrypted using the third party security system;
receiving the decrypted private user information at the first computing environment from the third party security system;
signing, by the first computing environment, the transaction data with the decrypted private user information; and
sending, by the first computing environment, the signed transaction data to for submission to a decentralized network:
wherein the third party security system includes an access token service;
wherein sending the request, bypassing the second computing environment, by the first computing environment to access a decrypted version of the private key information includes sending a message that includes the access token by the first computing environment to the access token service.