Granted Patent B2

US 12,647,255 · App. 18/658,373 · Granted Jun 2, 2026

Inventor: Craig Steven Wright (London, GB)

Assignee: NCHAIN LICENSING AG

H04L9/085H04L9/0825H04L9/3013H04L9/3066H04L9/3236

Abstract

Claims (20)

1 . A method of communicating a secret between a sender and a recipient, the sender and the recipient each having a respective public key/private key pair, the method comprising:

sending, from the sender to the recipient, information identifying a plurality of secrets selectable by the recipient;

receiving, at the recipient, the information identifying the plurality of secrets selectable by the recipient;

generating a third secret, to be shared between the sender and the recipient, from the respective public key/private key pairs held by the sender and recipient;

generating, at the recipient, a first public key, a first private key corresponding to the first public key and being of a first public key/first private key pair, and a second public key, all being of an elliptic curve cryptography system, wherein the first public key is generated from the respective public key/private key pair of the recipient, the first private key is based on the first public key, the second public key is based on the first public key/first private key pair and the third secret, and a second private key corresponding to the second public key is not known to the recipient;

sending, to the sender, from the recipient, the first public key, corresponding to a first secret, of the plurality of secrets, selected for access by the recipient;

sending, to the sender, from the recipient, the second public key, corresponding to a second secret, of the plurality of secrets, not selected for access by the recipient;

receiving, at the sender, from the recipient, the first public key and the second public key;

encrypting the first secret by means of the corresponding first public key and sending it from the sender to the recipient;

receiving, at the recipient from the sender, the first secret encrypted by means of the corresponding first public key;

encrypting the second secret by means of the corresponding second public key and sending it from the sender to the recipient; and

receiving, at the recipient from the sender, the second secret encrypted by means of the corresponding second public key,

wherein the first secret is accessible to the recipient by means of the corresponding first private key, the second secret is inaccessible to the recipient, and the sender is unable to distinguish between the first secret and the second secret.

2 . The method according to claim 1 , wherein the first secret is encrypted using a third public key derived from said first public key, containing a first masking term comprising a result of scalar multiplication, by a first masking integer, known to the sender, of an elliptic curve generator point of the elliptic curve cryptography system, added to a first encryption term by means of elliptic curve point addition.

3 . The method according to claim 2 , wherein the first encryption term comprises a result of scalar multiplication of the elliptic curve generator point by a third encryption integer dependent on the first public key.

4 . The method according to claim 3 , wherein the third encryption integer is a hash value of the first public key.

5 . The method according to claim 2 , wherein the second secret is encrypted using a fourth public key derived from said second public key, containing a second masking term comprising a result of scalar multiplication, by a second masking integer, known to the sender, of the elliptic curve generator point of the elliptic curve cryptography system, added to a second encryption term by means of elliptic curve point addition.

6 . The method according to claim 5 , wherein the second encryption term comprises a result of scalar multiplication of the elliptic curve generator point by a fourth encryption integer dependent on the second public key.

7 . The method according to claim 6 , wherein the fourth encryption integer is a hash value of the second public key.

8 . The method according to claim 1 , wherein a result of scalar multiplication of the first public key by the second private key is equal to a result of scalar multiplication of the second public key by the first private key.

Assignments (2)

Priority Claims (1)

Continuity (3)

References Cited (26)