Systems and Methods for Facilitating Digital Wallet-Based Transactions
Systems and methods for facilitating token-based transactions performed in accordance with many embodiments of the invention are illustrated. One embodiment includes a method that receives a request to perform a transaction corresponding to a transfer of at least one token. The method selects, from a plurality of verifiers, a transaction verifier for the request. The method transmits a collection of data to the transaction verifier, wherein the collection of data: corresponds to at least one of the transaction or the request, and includes a recipient identifier and an authentication value for a requesting user. The method receives a validity evaluation for the transaction including: an assessment of whether the request is properly authenticated; and an assessment of whether the request complies with at least one security policy associated with the at least one token. The method evaluates the request based on the assessment(s).
1 . A method for authenticating a token transaction, the method comprising:
receiving a request to perform a transaction from a device, wherein the transaction corresponds to a transfer of at least one token;
selecting, from a plurality of verifiers, a transaction verifier for the request;
transmitting a collection of data to the transaction verifier, wherein the collection of data:
corresponds to at least one of the transaction or the request; and
comprises a recipient identifier and an authentication value for a requesting user;
receiving, from the transaction verifier, a validity evaluation for the transaction, wherein the validity evaluation comprises:
a first preliminary assessment of whether the request is properly authenticated; and
a second preliminary assessment of whether the request complies with at least one security policy associated with the at least one token; and
evaluating the request, wherein evaluating the request:
is based, at least in part, on at least one of the first preliminary assessment or the second preliminary assessment, and
comprises:
when the request is evaluated as unsafe, rejecting the request; and
when the request is evaluated as safe, processing the request.
2 . The method of claim 1 , wherein:
rejecting the request comprises at least one of encrypting the request, removing authentication information from the request, requiring a second-factor authentication to proceed with the request, transmitting a request rejection to the device, or performing a direct verification of authorization to make the transaction; and
processing the request comprises at least one of transmitting the request to a blockchain node and transmitting a request acceptance to the device.
3 . The method of claim 1 , wherein a token of the at least one token is a non-fungible token (NFT).
4 . The method of claim 1 , wherein:
the authentication value comprises at least one of a digital signature, a message authentication code, a one-time code, a password, or a personal identification number; and
the first preliminary assessment comprises a verification of whether the authentication value for the requesting user corresponds to an owner of a first token of the at least one token.
5 . The method of claim 1 , wherein:
evaluating the request first comprises deriving a risk score for an initial sender of the transaction;
the risk score is derived based on at least one of: the identity of the requesting user, or potential maliciousness of the transaction;
the request is evaluated as unsafe when the risk score falls below a predetermined threshold; and
the request is evaluated as safe when the risk score meets or exceeds the predetermined threshold.
6 . The method of claim 1 , wherein:
each verifier in the plurality of verifiers is associated with a trust score; and
the trust score corresponds to an accuracy estimation of the verifier when authenticating requested transactions.
7 . The method of claim 1 , wherein the transaction verifier is an automated agent that executes in a secure environment.
8 . The method of claim 7 , wherein the automated agent is a machine learning model trained on evaluations performed for other requests by other verifiers of the plurality of verifiers.
9 . The method of claim 1 , the collection of data further comprises at least one of: a valuation of the transaction, a time limit corresponding to the transaction, a nonce corresponding to the transaction, a metadata file corresponding to the transaction, or a request header corresponding to the transaction.
10 . The method of claim 9 , wherein the at least one security policy comprises a requirement for one or more of:
the recipient identifier not being on a recipient banlist;
the recipient identifier being on a recipient allowlist;
an internet protocol address of the device not being a requestor banlist;
the internet protocol address of the device not being a requestor banlist;
the valuation of the transaction falling under a predetermined transaction maximum; or
the request being received during a certain time of day.
11 . A non-transitory computer-readable medium comprising instructions that, when executed, are configured to cause a processor to perform a process for authenticating a token transaction, the process comprising:
receiving a request to perform a transaction from a device, wherein the transaction corresponds to a transfer of at least one token;
selecting, from a plurality of verifiers, a transaction verifier for the request;
transmitting a collection of data to the transaction verifier, wherein the collection of data:
corresponds to at least one of the transaction or the request; and
comprises a recipient identifier and an authentication value for a requesting user;
receiving, from the transaction verifier, a validity evaluation for the transaction, wherein the validity evaluation comprises:
a first preliminary assessment of whether the request is properly authenticated; and
a second preliminary assessment of whether the request complies with at least one security policy associated with the at least one token; and
evaluating the request, wherein evaluating the request:
is based, at least in part, on at least one of the first preliminary assessment or the second preliminary assessment, and
comprises:
when the request is evaluated as unsafe, rejecting the request; and
when the request is evaluated as safe, processing the request.
12 . The non-transitory computer-readable medium of claim 11 , wherein:
rejecting the request comprises at least one of encrypting the request, removing authentication information from the request, requiring a second-factor authentication to proceed with the request, transmitting a request rejection to the device, or performing a direct verification of authorization to make the transaction; and
processing the request comprises at least one of transmitting the request to a blockchain node and transmitting a request acceptance to the device.
13 . The non-transitory computer-readable medium of claim 11 , wherein a token of the at least one token is a non-fungible token (NFT).
14 . The non-transitory computer-readable medium of claim 11 , wherein:
the authentication value comprises at least one of a digital signature, a message authentication code, a one-time code, a password, or a personal identification number; and
the first preliminary assessment comprises a verification of whether the authentication value for the requesting user corresponds to an owner of a first token of the at least one token.
15 . The non-transitory computer-readable medium of claim 11 , wherein:
evaluating the request first comprises deriving a risk score for an initial sender of the transaction;
the risk score is derived based on at least one of: the identity of the requesting user, or potential maliciousness of the transaction;
the request is evaluated as unsafe when the risk score falls below a predetermined threshold; and
the request is evaluated as safe when the risk score meets or exceeds the predetermined threshold.
16 . The non-transitory computer-readable medium of claim 15 , wherein:
each verifier in the plurality of verifiers is associated with a trust score; and
the trust score corresponds to an accuracy estimation of the verifier when authenticating requested transactions
17 . The non-transitory computer-readable medium of claim 11 , wherein the transaction verifier is an automated agent that executes in a secure environment.
18 . The non-transitory computer-readable medium of claim 17 , wherein the automated agent is a machine learning model trained on evaluations performed for other requests by other verifiers of the plurality of verifiers.
19 . The non-transitory computer-readable medium of claim 11 , the collection of data further comprises at least one of: a valuation of the transaction, a time limit corresponding to the transaction, a nonce corresponding to the transaction, a metadata file corresponding to the transaction, or a request header corresponding to the transaction.
20 . The non-transitory computer-readable medium of claim 19 , wherein the at least one security policy comprises a requirement for one or more of:
the recipient identifier not being on a recipient banlist;
the recipient identifier being on a recipient allowlist;
an internet protocol address of the device not being a requestor banlist;
the internet protocol address of the device not being a requestor banlist;
the valuation of the transaction falling under a predetermined transaction maximum; or
the request being received during a certain time of day.