Hardware wallet for virtual currencies (crypto assets)

Abstract

A virtual currency hardware with a secure virtual currency processing environment and transaction authentication device We propose a hardware wallet system. A secure cryptocurrency processing environment is encrypted. It is on a single die IC with embedded memory and has an encrypted entry with sensitive data. The encryption memory is connected to the encryption / decryption device, and the internal security mechanism The encryption entry is decrypted using a microcontroller coupled to the encryption / decryption device. The microcontroller unit requests and receives confidential data. The unit receives the request and uses the confidential data to fulfill the request. The security mechanism may include an internal encryption key derived from the micro-radiation source. The transaction approval device is a secure computing environment and a secure and a user experience device coupled to the complete computing environment, wherein A secure computing environment is one in which user experience devices are secure. Controls whether or not the application is communicating with the processing environment.

Description

[Background technology]

[0001]

[0001] Current cryptocurrency wallets store encrypted private keys and transfer cryptocurrencies (cryptocurrency). However, it is difficult to use and does not allow users to use credit cards or debit cards. This is an unfamiliar format for users who use virtual currencies for such transactions. Currency wallets are vulnerable to attacks and loss of sensitive data.

[0002] Current technical approaches to software and hardware security are There are risks such as software vulnerabilities being exploited, and hardware is also vulnerable. It transmits low-level integrated circuit commands to the communication ports of the individual IC chips that make up the device. There are also logical attacks.

[0003] Therefore, we are looking for a security solution that can store virtual currency and has a convenient and safe system. functionality and can be easily integrated into familiar devices such as smart cards, mobile phones, and computing devices. There is a need for hardware wallets that can be easily integrated into devices. Summary of the Invention

[0002]

[0004] Hardware wallet with secure processing environment and transaction authentication device The cryptocurrency processing environment is built on a single-die IC, and encryption containing confidential data is The encryption / decryption device is connected to this memory. The encryption / decryption device uses an internal security mechanism to decrypt the encryption. The microcontroller unit is connected to request and receive confidential data. The cross-controller unit receives the request and uses the confidential data to fulfill the request. The internal security mechanism includes an internal encryption key consisting of a micro-radiation source. The transaction approval device is a secure computing environment and a secure switch. The user has a user experience device with a computing environment. Control whether the experience device is communicating with a secure processing environment.

[0005] [Brief explanation of the drawings]

[0003]

[0006] Figure 1 shows a diagram of a secure transaction environment.

[0007] Figure 2A is a block diagram of a hardware wallet.

[0008] Figure 2B shows a point-of-sale (POS) system as a form of hardware wallet. Showing

[0009] Figure 2C shows an example of a wired mobile phone as a form of hardware wallet. FIG.

[0010] Figure 2D shows an implementation of a wirelessly connected mobile phone as a form of hardware wallet. An embodiment will be described.

[0011] Figure 3 shows an example process flow for using a hardware wallet. DETAILED DESCRIPTION OF THE INVENTION

[0004] Details of the invention

[0012] FIG. 1 shows a secure cryptocurrency transaction environment 100. This secure cryptocurrency processing environment100 may consist of multiple integrated circuit chips, a single integrated circuit, , or may be implemented on a single die of an integrated circuit.

[0013] This secure cryptocurrency processing environment 100 is powered by a microcontroller unit (MCU) 1 02, a coprocessor 104, a hardware encryption / decryption device 106, and an encryption memory 108. include.

[0014] The microcontroller unit 102 includes a secure enclave. The enclave may implement a coprocessor 104 and a hardware encryption / decryption unit 106. For example, the microcontroller unit 102 may have a single band that cannot be physically updated. The microcontroller unit 102 may be a PROM or ROM or other technology. Cryptographically authenticated (e.g., signed with a private key) software content updates The update may be restricted to be updated only by

[0015] This coprocessor 104 implements the cryptographic functions. The coprocessor 104 can be easily updated. Since cryptographic coprocessor 104 cannot be updated (even if it can be updated), it is important to ensure that it is well established or It is preferable to implement cryptographic functions that do not change significantly over time. The processor 104 can be used to speed up the processing of virtual currency transactions.

[0016] The encryption memory 108 can store a private key. The key used to sign transactions.

[0017] Secure cryptocurrency processing environment 100 supports cryptocurrencies such as Blake and Open Transactions. Algorithmic protocols and the algorithms used in them in relation to other cryptocurrency protocols The secure virtual currency processing environment 100 may support Open Transaction It can also support signing of related transactions in protocols such as ions. do.

[0018] The microcontroller unit 102 or the security via the cryptographic coprocessor 104 The virtual currency processing environment 100 does not have direct access to the Internet for certain functionality. For example, BIP47 Identity (Bitcoin Improvement Proposal #47) or is the Open Bitcoin Privacy Project (OBPP), OBPP version 5 (OBPP-5) (github.com / Op enBitcoinPrivacyProject / rfc / blob / master / obpp-05.mediawiki).

[0019] The microcontroller unit 102 and the cryptographic co-processor 104 may be, for example, a Blue Directly with hardware I / O devices such as a toothbrush or a camera for scanning QR codes In such cases, the hardware input / output device is The controller unit 102 and cryptographic co-processor 104 provide a non-updatable or trusted It may be treated as if it doesn't exist.

[0020] The hardware encryption / decryption device 106 may be hardware-based. The internal security mechanism is used to read and write confidential data to the encrypted memory 108. Sensitive data can be a single number, a group of numbers, or other alphanumeric data, or or any other pattern of 1s and 0s that represents any type of information. The organization may use internal encryption keys, also known as hardware encryption keys or internal keys. The internal encryption key may be an asymmetric key or a symmetric key pair. The key pair may be generated from hardware-derived entropy. The entropy derived from the wear may be derived from a micro-radiation source. The common key pair is uniquely set at the time of manufacturing. If the encryption / decryption memory 108 is tampered with, the hardware encryption / decryption device 106 This could potentially destroy the internal encryption keys used to encrypt data.

[0021] The hardware encryption / decryption device 106 is, for example, It is difficult to tamper with, as it is made using a single-die IC (Integrated Circuit).

[0022] FIG. 2A is a block diagram of a hardware wallet 200.

[0023] The hardware wallet 200 is a virtual currency wallet 202 and a secure transaction The hardware wallet 200 is shown with a transaction authentication device 204. The cryptocurrency wallet 202 and the secure transaction authentication device 204 are integrated into one physical device. May be integrated into units.

[0024] Hardware wallets 200 store sensitive data such as cryptocurrency information in encrypted media. Securely store cryptocurrency information in the memory 108 and securely manage transactions that use the stored cryptocurrency information. Acknowledgment can be provided.

[0025] Hardware Wallet 200 securely stores cryptocurrency information as well as other sensitive data. It can store sensitive data and protect it via internal encryption keys. Sensitive data may be personal information. Sensitive data may be information about cryptocurrencies. .

[0026] The virtual currency wallet 202 includes a secure virtual currency processing environment 100. The currency wallet 202 can take various forms. The virtual currency wallet 202 can be a physical It may be a hardware device or may be embedded in a larger device. The physical hardware device is a debit / cash machine with a chip and pin interface. Credit card, smart card, USB drive, Bluetooth-enabled key fob, or small It may be a familiar device, such as a type of insertable concealable device. The hardware device may be, for example, Bluetooth, Near Field Communication (NFC), Wi-Fi or other The wireless communication can be performed via short-range wireless communication such as the wireless communication means for virtual currency. Wallet 202 is a virtual currency wallet that can be used in smartphones, personal computers, cars, wallets, etc. It can be embedded in devices where you want to carry money or store personal information. can.

[0027] The transaction approval device 204 is a secure computing environment 206, non-secure computing environment 208, user experience devices 210, switches The transaction includes a channel 212, a network connection 214, an insecure connection 216, and a secure connection 218. The application authorization device 204 can be implemented in anything, including vehicles and other consumer devices. This can be done.

[0028] The switch 212 secures the user experience device 210 Do not connect to a secure computing environment 206 or to an unsecured computer 208. Secure Computing Environment 2 06 controls the switch 212 via the connection 220, for example, and The device 210 is in a secure computing environment 206 or secure The network can determine which of the computing environments 208 is controlled by the network. .

[0029] The user experience device 210 includes a user display 222 and a user and a user input device 224 that can directly interact with the secure virtual currency processing environment 100. In this configuration, the hardware wallet 200 has a secure computing environment 206. Sometimes it doesn't work.

[0030] The user display 222 may be a mobile phone display screen, a screen, a payment processor, or the like. the screen, LCD panel, or other means of the computer terminal to provide information to the user, for example, through a speaker or other means. Anything that can convey information is fine.

[0031] The user input device 224 may be a keyboard, a touchpad, a touchscreen on a mobile phone, or the like. Input from the touch screen, input buttons, microphone, mouse, fingerprint reader, or other devices User input device 224 is fixed (non-replaceable) But that's okay.

[0032] The secure computing environment 206 The user experience device 210 and the microcontroller are connected via a connected connection 218. Requests / replies can be sent to and from the wireless unit 102. The protected computing environment 206 may, for example, provide a trusted private key for the request. It may be signed by a third party or secured by various means, such as cryptographic or physical. Only if communication occurs over a secure connection 218 The trust is obtained from the virtual currency wallet 202 by various means such as the above. The cryptographic wallet system 200 first encrypts the sensitive data at rest (i.e., the encrypted data to the encrypted memory 108, and then to decrypt the stored confidential data. The secure computing environment 206 uses only the secure environment 100. The secure computing environment 206 uses the internal encryption private key. While remaining in the hardware encryption / decryption device 106, the standard user authentication process It can function as part of a password (e.g., a PIN).

[0033] The hardware wallet 200 uses a secure connection 218 to conduct off-chain transactions. Sign transactions and use Open Transaction Standard (opentxs) transactions. OpenTxs transactions can be used to sign transactions for virtual currencies. The request can be signed by making it to the let 202 over a secure connection 218 . The virtual currency wallet 202 can also be signed with a private key. Bitcoin 200 is a reusable payment code defined by the Open Bitcoin Privacy Project-5. can be used to sign on-chain and off-chain transactions. do.

[0034] This wallet 202 uses secp256k1 and ed25519 to encrypt the public key. Hierarchical key generation can be used for secp256k1. is described in Bitcoin Improvement Proposal 32 (BIP-32), and ed25519 is described in BIP32-ed25519. This can be done from a single seed as described above.

[0035] When a security key operation is requested, the target key is sent as an HD BIP-32 packet. It is specified by a secp_tweak_value and a tweak value (which can be zero). The tweak value is the secp_tweak_value of libsecp256k1. The same arguments for the 256k1_ec_seckey_tweak_add and secp256k1_ec_pubkey_tweak_add functions are It's the same as a number.

[0036] The crypto wallet 202 is used to process various cryptographic requests (also known as crypto operations). The parameters of the operation are the seed (i.e., the secret key) to be initialized. If the seed is initialized, the software may use different parameters. It is output only once to the wallet and the user can record the seed.

[0037] The cryptocurrency wallet 202 can generate a public key derived from the seed. The derived public key can be used at any time as long as the request is repeated with the same accompanying parameters. The cryptocurrency wallet 202 holds a copy of the derived public key, so There is no need.

[0038] This cryptocurrency wallet 202 has available extra space to store another seed. This responds to the request by returning whether there is a room for another seed. " request to ensure there is space available before attempting to initialize a new seed. You can also request it first.

[0039] The parameters included in this request to Wallet 202 are the card seed ID, Index, HD Pass, Tweak, Curve, Counterparty Public Key, and Hash ( Translator's note: The actual parameters are card seed index, a HD path, a tweak, and ac The certificate includes a public key, a hash, and a corresponding public key.

[0040] The card seed index is the number of available seeds in the card. is an integer that specifies which of the following to use. For example, the first seed ( The secret key is given by specifying the card seed index as zero. For the second seed, use card seed index 1. Access it via.

[0041] HD Path is a hierarchical deterministic path as defined in BIP-32. For example, The HD path of the first child key of the seed key is "m / 0", and the HD path of its fifth child key is "m / 0 / 4". is.

[0042] The tweak is implemented using the secp256k1_ec_seckey_tweak_add function and and the value specified in the secp256k1_ec_pubkey_tweak_add function. The tweak value can be zero. stomach.

[0043] The curve specifies the elliptic curve used to calculate the derived key, e.g. Refers to the curve specified in secp256k1 or ed25519 that implements the public key.

[0044] Counterparty public keys ensure that only systems with the corresponding private keys can use the cryptocurrency. A destination "address" that can be used.

[0045] The hash is the payload to sign. The code is the transaction seed of the card seed index, or The signature is based on a public key derived from the box seed and other parameters that accompany the request. It is named.

[0046] The cryptocurrency wallet 202 receives a request for extended public key generation (also known as xPub calculation). The card may respond to xPub calculation requests. May have input parameters such as code index, HD path, tweak, curves etc. The xPub computation request returns a derived Extended Public Key.

[0047] The cryptocurrency wallet 202 responds to requests for cryptographic signatures (also called signatures). The signature request includes the card seed index, HD pass, tweak, card The signature request may be accompanied by input parameters such as a signature, a signature file, and a hash. Returns a cryptographic signature of the hash using a number (aka a cryptographic private key). is the seed for the card seed index and other parameters that accompany the signature request. The signature process can be performed on-chain and off-chain (e.g., Open Transactions). The transaction can be approved.

[0048] The cryptocurrency wallet 202 uses Elliptic Curve Diffie-Hellman Key Exchange (ECDH) ECDH shared secret computation involves the use of a card signature. Input parameters such as code index, HD pass, tweak, curve, counterparty public key, etc. ECDH shared secret computation returns the shared secret as an elliptic curve point. Elliptic curve points can return either x-values ​​or both x-values ​​and their values.

[0049] The cryptocurrency wallet 202 is initialized by returning a seed phrase of n characters (n It may respond to requests for character counts.

[0050] The virtual currency wallet 202 determines whether the virtual currency wallet 202 is empty. , that is, check whether there is a seed currently set in the virtual currency wallet 202 The ISP may respond to requests to

[0051] Security features are implemented in various components of the hardware wallet 200. For example, secure virtual currency processing environments 100, secure computers computing environment 206, secure connection 218, etc.

[0052] Updates to security features may not be permitted. Updates to the hardware can only be performed in a highly secure manner. Let 200 may not have update restrictions on non-security features, so We are making the Hardware Wallet 200 more adaptable and user-friendly, while also offering a This makes it easier to change the settings to maintain the same level of security.

[0053] The network connection 214 may be, for example, Bluetooth, Wi-Fi, or a cellular cell tower network. network, satellite, or hardware wallet 200 with other computing devices. various types of wired and wireless networks, including other network technologies that enable It can provide connectivity to the Internet via network technology. The network connection 214 provides the microcontroller unit 102 with internet access. This can be done.

[0054] The unencrypted connection 216 and the network connection 214 allow the microcontroller unit The unit 102 and the cryptographic coprocessor 104 can be configured to communicate with the Internet. .

[0055] The insecure computing environment 208 may communicate over an insecure connection 216. Execute the application that requests the encryption operation to the encryption wallet 202 using The unencrypted computing environment 208 and the applications running on it can be The application can be updated online, for example, by the user or the application developer. It can also be Noh.

[0056] The non-secure computing environment 208 may be configured to display as many images as needed in a rich graphic format. It runs applications and simply relies on a cryptocurrency wallet 202 This allows applications to securely provide their encryption capabilities to users.

[0057] The secure computing environment 206 is designed to allow hardware or software updates. or on an unmodified microcontroller unit. The software in the secure computing environment 206 may be It may be possible to update it in a secure manner.

[0058] When a user needs to confirm a transaction, they The secure computing environment 206 is connected to the insecure computing environment 206 via a switch 212. Disable 08 and confirm the transaction with the user. This is implemented in hardware. It may be in an unchangeable form.

[0059] The secure computing environment 206 may include a switch 212 or other the insecure computing environment 208 through appropriate means Filtering or insecure computing environments 208 Access to the user experience device 210 can be completely censored.

[0060] The microcontroller unit 102 and the cryptographic co-processor 104 are All input from the superior device 210 may be considered untrusted, and In this case, the hardware wallet 200 is recorded only in the virtual currency wallet 202, and the user - If the input is entered into the experience device 210 and sent along with the input, the input Additional security mechanisms may be employed, such as a PIN that may be trusted.

[0061] The user experience device 210 allows the user to access the wallet 202 for virtual currency. To verify that you have access to unlock the cryptographic signing feature, enter ( For example, a personal identification number (PIN) or other trusted input can be received. do.

[0062] A copy of any confidential data stored in the cryptocurrency wallet 202 is kept in a backup and recovery purposes in certain safe scenarios.

[0063] The private key stored in the virtual currency wallet 202 is the "Need" key specified in BIP-39. Monic code words, etc., that are easily understood by humans. Deterministic key generation algorithms that rely on visible IDs You can back it up by doing this.

[0064] The virtual currency wallet 202 is deleted completely. It can also respond to a panic PIN to unlock cryptographic signing functionality. Instead, you want to remove access to the funds on your cryptocurrency wallet 202. , which the user can use in place of the actual pin.

[0065] The microcontroller unit 102 and the secure computing environment 206 , as long as the software upgrade process is tamper-proof and cryptographically secure. , software upgrades can be performed by a trusted source, e.g., the manufacturer. can.

[0066] This wallet system 200, as opposed to a separate component, is a Implementing security-critical functionality on the wallet 202 (e.g., on a smart card) This allows for the integration of various "hardware wallets." The Hardware Wallet 200 is based on the security of hardware and software processing. Critical functions can be implemented on a single integrated circuit die, making it less susceptible to physical attacks. It can provide a small footprint and can be used with familiar devices such as smart cards. Easily manage your funds by storing your private keys in a hardware wallet, a performance factor and can use different devices for transactions. Separating the secure computing environment 206 from the secure computing environment 208 allows You will be able to use a variety of applications that can be updated. The application reliably provides high security functions for exchanging confidential data with users. can be executed.

[0067] FIG. 2B shows a sales example when the hardware wallet 200 is used for sales (at a store, etc.). 2 shows an embodiment 200b as a point of sale (POS) system. A smart card 202b, a point of sale information management system 204b, a user input / output unit 210b of the POS, A display 222b and an input button 224b are shown.

[0068] Smart card 202b is one embodiment of wallet 202 for virtual currency. Point of sale system 204b is one embodiment of secure transaction approval device 204. do.

[0069] The POS information user input / output unit 210b is a user experience device 210 This is one embodiment of the present invention.

[0070] The display 222 b of the POS is one embodiment of the user display 222 .

[0071] The input buttons 224 b of the POS are one embodiment of the user input device 224 .

[0072] The insecure connection 216 is a connection between the insecure computing environment 208 and the secure These communications are performed by the smart card 2. This occurs via the 02b chip and pin interface.

[0073] The secure connection 218 connects the secure computing environment 206 to the secure virtual currency. These communications are shown as direct connections between the smart card 202b and the processing environment 100. This occurs through a loop and pin interface.

[0074] FIG. 2C illustrates a wired mobile phone embodiment of the hardware wallet 200. 20c shows a wired smartphone 204c and a square external attachment 20 Equipped with 2c.

[0075] This wired smartphone 204c acts as a secure transaction authorization device 20 This is an embodiment of 4.

[0076] This external attachment 202c is an embodiment of a wallet 202 for virtual currency. The attachment 202c also connects to a receptacle on a wired smartphone 204c, such as Audio jack, USB plug, Lightning plug, or wired smartphone 204c It can be plugged into the other plug above.

[0077] The insecure connection 216 is a connection between the insecure computing environment 208 and the secure These communications are wired smart cards. This is done through the receptacle of phone 204c.

[0078] The secure connection 218 connects the secure computing environment 206 to the secure virtual These communications are performed via wired smartphones. The power comes through the receptacle of the power supply 204c.

[0079] FIG. 2D shows a wireless smartphone 204d, a wireless cryptocurrency wallet 204b, and a 02d, hardware watch with wireless unprotected connection 216d, wireless protected connection 218d 2 illustrates one embodiment 200d of a wireless mobile phone of the LTE 200.

[0080] The wireless smartphone 204d is a secure transaction authorization device 204 The wireless smartphone 204d is an embodiment of the present invention. A mobile phone that has a wireless LAN (wireless LAN), a Bluetooth or Wi-Fi or other near-field communication technology.

[0081] The wireless virtual currency wallet 202d is a This is one embodiment.

[0082] The wireless unencrypted connection 216d provides a secure connection between the unencrypted computing environment 208 and the Although shown as direct connections between cryptocurrency processing environments 100, these communications are not wired. This is done through the short-range wireless communication technology of the wireless smartphone 204d.

[0083] The wireless secure connection 218d connects the secure computing environment 206 to the secure Although direct connections between the cryptocurrency processing environment 100 and the This is done through the short-range wireless communication technology of the smartphone 204d.

[0084] Figure 3 shows an example process flow 300 for a hardware wallet 200. is.

[0085] Process flow 300 begins at step 302, where a wallet for virtual currency is created. and Secure Transaction Authorization Device Communication is established between the

[0086] Next, process flow 300 moves to step 304. A secure transaction authorization device is used to authorize transactions using the wallet. Request authorization for the action.

[0087] Next, process flow 300 moves to step 306. Switches to control the user experience aspects of the transaction authorization device Control the switch.

[0088] Next, process flow 300 continues to step 308, where the secure processing environment is Send and receive information to your Perience device to process transactions from your cryptocurrency wallet. Receive authorization for the application.

[0089] Next, process flow 300 proceeds to step 310, where, after the transaction is approved, A secure processing environment provides control over user experience devices and insecure processing. The process flow 300 then ends.

Claims

1. A secure cryptocurrency processing environment characterized by: Cryptographic memory for holding cryptographic entries having sensitive data The internal security mechanism is used to read and decrypt the encrypted entry to reveal the secret data. Encryption / decryption unit connected to memory providing the secret data Encryption memory providing the secret data a device coupled to the encryption / decryption device for requesting the confidential data from the encryption / decryption device; Sending and receiving microcontroller units The microcontroller unit receives the request and executes the The internal security mechanism uses internal cryptography using micro-radiation sources. key

2. In the secure virtual currency processing environment of claim 1, a request is sent to a hierarchical deterministic wallet. The present invention is characterized by generating an address for a

3. In the secure virtual currency processing environment of claim 2, according to Bitcoin Improvement Proposal 47 What generates the address.

4. The secure virtual currency processing environment according to claim 2 is used to perform the open bitcoin privacy program. Generates addresses according to version 5 of the project.

5. A hardware wallet system that includes: It is a secure computing environment and can be accessed through a switch. A connected user experience device is a feature of the connected environment. The secure computing environment is designed to ensure that the user experience device is secure. Controls whether or not you are communicating with the clean processing environment.

6. The hardware wallet system according to claim 5, wherein the switch is Connecting a perience device to an unsecured computing environment A second connection point for connecting the

7. The hardware wallet system of claim 6 is a secure computer The user experience is controlled and secured by the device. Decide whether to communicate to a secured or unsecured processing environment thing.

8. The hardware wallet system of claim 5, wherein the secure computing environment is Signing off-chain transactions.

9. The hardware wallet system of claim 8, wherein off-chain transactions are Open Transactions are standard transactions.

10. A hardware wallet that has the following: Computing Chips A network interface for the chip to determine the extended public key.

11. 11. The hardware wallet of claim 10, wherein the extended public key is Bitcoin Improvement Proposal 32. Something that is.

12. 11. The hardware wallet of claim 10, wherein the network interface is a derived extension. Before determining the public key, arguments are received, such as the card seed index and the hierarchy determination One that includes paths, tweaks, and curves.

13. 13. The hardware wallet of claim 12, wherein the computer is a single-die integrated circuit. of.

14. The hardware wallet of claim 10, wherein the network interface is a chip and pin. The interface of the application.

15. Hardware wallets allow you to use smart cards with a network interface. What is composed.

16. 16. The hardware wallet of claim 15, wherein the smart card is in the shape of a credit card. and the network computer interface is a chip and pin interface thing.

17. 17. The hardware wallet of claim 16, wherein the smart card is a conventional credit card. Those that can use the network.

18. 16. The hardware wallet of claim 15, wherein the smart card is a single die integrated circuit. Something that happens.

19. 16. The hardware wallet of claim 15, wherein the smart card is a hierarchical deterministic wallet. What generates the address.

20. The hardware wallet according to claim 19 is configured to generate an address based on Bitcoin Improvement Proposal 47. The one that generates the data.

21. The hardware wallet of claim 19 is used for Bitcoin Privacy Project Bank. Addresses are generated based on section 5.

22. A cryptocurrency wallet consisting of: Hardware Wallet User experience devices are connected to hardware. The system signs off-chain transactions.

23. The hardware wallet of claim 22, wherein off-chain transactions are opened. Transactions are standard transactions.

24. The hardware wallet of claim 22 generates addresses for hierarchical deterministic wallets. Something that happens.

25. The hardware wallet according to claim 24, wherein the address is set based on Bitcoin Improvement Proposal 47. The one that generates the data.

26. The hardware wallet of claim 24 is a Bitcoin Privacy Project Addresses are generated based on section 5.

27. 23. The hardware wallet of claim 22, comprising a single die integrated circuit.

Images