Systems and methods for addressing security-related vulnerabilities arising in relation to off-blockchain channels in the event of failures in a network
A method in accordance with the invention includes: providing to a hub, from an enclave associated with a TEE at a node, an enclave public key; establishing a channel with the hub by broadcasting to a blockchain network a funding transaction which encumbers a digital asset with a first public key, a second public key and a third public key such that the encumbrance of the digital asset may be removed by: 1) both a first signature generated from a first private key corresponding to the first public key and a second signature generated from a second private key corresponding to the second public key; or 2) a third signature, valid for the third public key, the third public key associated with a group; receiving a commitment transaction encrypted with the enclave public key; detecting a failure; issuing a failsafe activation request to the group using data from the enclave.
1. A computer-implemented method of updating private key share distributions, comprising:
detecting a redistribution request;
identifying congress members using one or more attributes included in at least some of transactions to a public group address associated with the congress members;
responsive to detecting the redistribution of the request, generating a new private key share, and transferring all digital assets associated with the public group address to a new public address associated with a new public key.
2. The computer-implemented method according to claim 1 , wherein the processing resource is a node associated with a blockchain network.
3. The computer-implemented method according to claim 2 , wherein the node is associated with a congress.
4. The computer-implemented method according to claim 1 , wherein the redistribution request comprises detecting that a prospective new member has transferred digital assets into the public group address.
5. The computer-implemented method according to claim 1 , wherein the redistribution request comprises determining that a member of the group associated with the public group address has requested withdrawal of a member deposit.
6. The computer-implemented method according to claim 4 , wherein a prospective new member transferring digital assets by nodes requesting to join an associated congress.
7. The computer-implemented method according to claim 1 , wherein congress members are identified using presence of absence of attributes that indicate a purpose for a transfer.
8. The computer-implemented method according to claim 7 , wherein a flag is included in a transaction when the transferor is not requesting to join the congress.
9. The computer-implemented method according to claim 1 , wherein the generation of the private key share is performed within a trusted execution environment.
10. A non-transitory computer-readable storage medium comprising computer-executable instructions that, when executed, configure a processor to perform the method of claim 1 .
11. An electronic device comprising:
an interface device;
a processor coupled to the interface device;
a memory coupled to the processor, the memory having stored thereon computer executable instructions that, when executed, configure the processor to perform the method of claim 1 .
12. The electronic device according to claim 11 , wherein the processor includes a trusted execution environment and wherein the computer executable instructions are executed within the trusted execution environment.