Granted Patent B2

US 12,346,895 · App. 18/700,131 · Granted Jul 1, 2025

Inventors: Pamela Ghosh (San Mateo, CA); Wanyun Gu (Menlo Park, CA); Mahdi Zamani (Mercer Island, WA); Mihai Christodorescu (Belmont, CA); Cuy Sheffield (Menlo Park, CA)

Assignee: Visa International Service Association

G06Q20/38215G06Q20/36G06Q20/389

Abstract

Claims (36)

1. A method comprising:

determining, by a delegated certificate authority computer, a tier from a plurality of tiers for a digital wallet provider based on a list of qualifying criteria;

generating, by the delegated certificate authority computer, a digital certificate based on the tier, wherein the digital certificate includes a first digital signature from a central bank computer and grants access to a digital currency maintained by a blockchain network, wherein the tier requires a digital wallet application computer associated with the digital wallet provider to communicate with the delegated certificate authority computer without directly interacting with the blockchain network;

signing, by the delegated certificate authority computer, the digital certificate with a second digital signature;

transmitting, by the delegated certificate authority computer to the blockchain network, a request to obtain a digital wallet provider identifier for the digital wallet provider;

receiving, by the delegated certificate authority computer from the blockchain network, the digital wallet provider identifier;

transmitting, by the delegated certificate authority computer to the digital wallet application computer, the digital certificate and the digital wallet provider identifier;

based on the tier requiring the digital wallet application computer to communicate with the delegated certificate authority computer without directly interacting with the blockchain network:

receiving, by the delegated certificate authority computer from the digital wallet application computer, a request to add an amount of the digital currency to a digital wallet provider account of the digital wallet provider, the request comprising an amount of the digital currency, the digital wallet provider identifier, and the digital certificate; and

transmitting, by the delegated certificate authority computer to the blockchain network, the request, wherein the blockchain network verifies the first digital signature and the second digital signature of the digital certificate, and adds to a blockchain maintained by the blockchain network, the amount of the digital currency to the digital wallet provider account.

2. The method of claim 1 , wherein the digital wallet application computer provides the digital certificate to the blockchain network in a transaction, which verifies the digital certificate before allowing the transaction to proceed with the blockchain network.

3. The method of claim 1 , wherein the digital wallet application computer provides the digital certificate to the delegated certificate authority computer, and the delegated certificate authority computer transmits a transaction request for a transaction to the blockchain network on behalf of the digital wallet application computer, and wherein the blockchain network verifies the first digital signature and the second digital signature of the digital certificate to complete the transaction.

4. The method of claim 1 , wherein the list of qualifying criteria is received by the delegated certificate authority computer from a central bank computer and the list of qualifying criteria comprises a plurality of tiers of digital certificates and criteria necessary to be assigned to one of the plurality of tiers.

5. The method of claim 1 , wherein the delegated certificate authority computer evaluates the digital wallet provider in response to receiving an onboarding request message.

6. The method of claim 1 , wherein the digital certificate comprises an expiration time for which the digital certificate is valid.

7. The method of claim 1 , wherein the digital wallet provider identifier is a public key of a public-private key pair.

8. The method of claim 1 , wherein the blockchain network maintains a blockchain managing transactions using the digital currency.

9. The method of claim 8 , wherein the digital currency is central bank digital currency (CBDC).

10. The method of claim 9 , wherein the blockchain network comprises a plurality of nodes.

11. The method of claim 1 , further comprising:

transmitting, by the delegated certificate authority computer to the blockchain network, a request to obtain a digital wallet provider identifier for the digital wallet provider;

receiving, by the delegated certificate authority computer from the blockchain network, the digital wallet provider identifier; and

transmitting, by the delegated certificate authority computer to the digital wallet application computer, the digital wallet provider identifier, wherein the digital wallet provider identifier is a digital wallet provider public key of a digital wallet provider public-private key pair.

12. A delegated certificate authority computer comprising:

a processor; and

a non-transitory computer readable medium comprising instructions executable by the processor to perform operations including:

determining a tier from a plurality of tiers for a digital wallet provider based on a list of qualifying criteria;

generating a digital certificate based on the tier, wherein the digital certificate includes a first digital signature from a central bank computer and grants access to a digital currency maintained by a blockchain network, wherein the tier requires a digital wallet application computer associated with the digital wallet provider to communicate with the delegated certificate authority computer without directly interacting with the blockchain network; and

signing the digital certificate with a second digital signature;

transmitting, to the blockchain network, a request to obtain a digital wallet provider identifier for the digital wallet provider;

receiving, from the blockchain network, the digital wallet provider identifier;

transmitting, to the digital wallet application computer, the digital certificate and the digital wallet provider identifier;

based on the tier requiring the digital wallet application computer to communicate with the delegated certificate authority computer without directly interacting with the blockchain network:

receiving, from the digital wallet application computer, a request to add an amount of the digital currency to a digital wallet provider account of the digital wallet provider, the request comprising an amount of the digital currency, the digital wallet provider identifier, and the digital certificate; and

transmitting, to the blockchain network, the request, wherein the blockchain network verifies the first digital signature and the second digital signature of the digital certificate, and adds to a blockchain maintained by the blockchain network, the amount of the digital currency to the digital wallet provider account.

13. The delegated certificate authority computer of claim 12 , wherein the digital currency is central bank digital currency (CBDC).

Assignments (2)

Continuity (2)

References Cited (19)