Devices, systems, and methods for public / private key authentication

Abstract

To provide a more efficient cold storage system and method of use. [Solution] To securely execute authentication processes such as cryptocurrency transactions, a storage device is used that encrypts and stores public and private keys and is equipped with a secure element (SE) that performs signing and hashing operations. The processing unit (PD) connects to the SE via NFC and, upon receiving a transaction start (210) from the user interface, sends the necessary information to the SE (230). The SE generates a signature using the private key, verifies its validity, and signs the transaction (240). The PD sends the signed information to the network (250) to complete the transaction.

Description

Technical Field

[0003]

[0001] This application is related to and claims priority from U.S. Provisional Application No. 63 / 135,157, filed on January 8, 2021, entitled "Cryptocurrency Apparatus, System, and Method", and U.S. Provisional Application No. 63 / 271,545, filed on October 25, 2021, entitled "Apparatus, System, and Method for Public Key / Private Key Authentication", the contents of which are hereby incorporated by reference in their entirety for all purposes.

Background Art

[0002] In the field of cryptocurrency (such as Bitcoin), in order to access cryptocurrency for spending purposes, a private key (a unique, usually alphanumeric code that enables the use of the currency) is required. The public key basically identifies the recipient of the currency. In a cryptocurrency transaction, usually, in order to complete the transaction, the sender and the recipient need to share with each other the addresses that are derivatives of the public key, and the associated blockchain is used to prove the validity of the transaction and to confirm that the sender has the funds. In the case of other types of authentication (such as FIDO or PGP), the sender and the recipient share the actual public key. When the settlement is distributed to that address, the recipient needs the private key to access the funds. Therefore, it is very important to keep the private key secure, because the user who holds the private key may be able to access and convert the holder's cryptocurrency without permission. An exemplary diagram of the derivation process from the private key to the public key and address can be found at https: / / iancoleman.io / bip39 / , which is hereby incorporated by reference into this specification.

[0003] Private keys stored electronically in internet-connected digital wallets (i.e., "hot wallets") are vulnerable to hacking. When using a hot wallet, the steps for conducting a transaction (generating and storing the private key, and digitally signing the transaction using the private key) are typically performed by a single online device, and the signed transaction is broadcast over the network. Signed transactions broadcast over the network are vulnerable to attack.

[0004] "Cold storage" can circumvent the above problems by signing transactions using private keys in an environment without an internet connection. Transactions are initiated online but may then be temporarily transferred to offline wallets, such as USB drives, CDs, hard drives, or electronic storage on offline computers. Transactions are digitally signed offline before being sent to the online network. Because the private key is never online during the signing process, even if a hacker gains access to the transaction details, they will not be able to discover the private key used to execute the transaction.

[0005] While many systems and methods are known for accessing cold storage, they tend to be more burdensome than systems and methods for using hot wallets. Therefore, there is still a need in the field for more efficient systems and methods for using cold storage devices. [Overview of the project]

[0006] One aspect of the present invention relates to a system for executing cryptocurrency transactions. The system comprises a cryptocurrency cold storage device having an integrated circuit with a secure element. As used herein, the term “secure element” refers not only to specially designed microcontrollers that are called or specifically marketed as secure elements in the art (e.g., for use in credit cards), but also to any microcontroller programmed with appropriate security software to perform the functions of a secure element known in the art. The secure element comprises a processor, digital memory, and a first near-field communication (NFC) interface. The digital memory of the secure element contains instructions readable by the processor of the secure element for causing the secure element to store a public key and a private key encrypted in the digital memory, generate a public key using the private key, and perform signing and hashing operations. In some embodiments, the public key may be shared from the secure element for convenience. The system further comprises a processing device such as a mobile device, such as a smartphone, tablet, or laptop computer, having a user interface, a second NFC interface, and a communication interface configured to connect to a global communication network. The processing unit comprises digital memory and a processor. The digital memory is programmed with processor-readable instructions that cause the processing unit to establish a secure connection with the NFC interface of the secure element via NFC, transmit information to the secure element for processing by the secure element, and establish a cryptocurrency wallet capable of operating to access the cryptocurrency network via a global communication network. The instructions readable by the processor of the cold storage device and the processor of the processing unit, when read by their respective processors, can cause the system to execute predetermined steps.These steps include the processor receiving the initiation of a transaction via a user interface, where the transaction corresponds to a currency value or token. The processor establishes a secure communication link with a secure element via NFC and sends information to the secure element for processing via the NFC link. The secure element obtains a private key, uses the private key to perform a hash operation to generate a signature, decrypts the private key using a public key (i.e., checks the chain associated with the public key to ensure the signature matches a public key signature that can only be generated using a specific private key), signs the transaction, and sends the signed transaction information to the processor. The processor establishes a communication session with a cryptocurrency exchange server on the cryptocurrency network via a global communication network and sends the signed transaction information to the cryptocurrency exchange server (e.g., a node on the blockchain) to initiate a transaction that will act to send the currency value or token to the exchange server. For example, once a block is signed and ready to be added to the chain, the exchange server communicates with the node to push the transaction into the mempool (i.e., a waiting area for unconfirmed transactions).

[0007] The system may be configured to receive cryptocurrency deposits, and the processing unit is configured to display the cryptocurrency address associated with the cryptocurrency wallet in an encoded format for the payer. The secure element may also include a payment module configured to exchange payment information with a card reader to perform purchase transactions. In a system with a single secure element, the single element may have partitions separating the software for performing cryptocurrency functions from the software for performing payment functions. The software may share information between applets, such as private keys and PINs. Each application typically resides in its own "secure box." Sharing between secure boxes is possible but can be relatively complex. In other embodiments, the first secure element may be dedicated solely to performing cryptocurrency functions, and the second secure element may be dedicated solely to performing payment functions.

[0008] In some embodiments, the cold storage device comprises a card having standard dimensions for transaction cards in accordance with ISO / IEC 7810:2003 ID-1, for example, a card made of metal, ceramic, glass, or a combination thereof. In some embodiments, the card does not have a settlement module and does not have a magnetic stripe configured to interact with a card reader, but in other embodiments, the card may further comprise at least one of a settlement module and a magnetic stripe. In other embodiments, the cold storage device may take the form of a key fob made of metal, ceramic, glass, or a combination thereof.

[0009] The cold storage device and / or processing device may further include a biometric reader module connected to the respective processor and configured to restrict the operation of the cold storage device or access to the cold storage device based on biometric information detected by a biometric reader.

[0010] Another aspect of the present invention relates to a cryptocurrency cold storage device having an integrated circuit comprising a secure element. The secure element comprises a processor, digital memory, and a near-field communication (NFC) interface, such as, but not limited to, an interface configured for communication using the ISO 14443 standard. The digital memory of the secure element includes program instructions readable by the processor of the secure element, which cause the secure element to store a public key and a private key encrypted in the digital memory, generate a public key using the private key, and perform signing and hashing operations. The programmed instructions also cause the secure element to respond to the reception of high-level information from a mobile device linked to the secure element by a secure communication link via the NFC interface, the high-level information relating to a transaction corresponding to a currency value or token. This response includes obtaining the private key, performing a hashing operation using the private key to generate a signature, decrypting the private key using the public key (i.e., checking the chain associated with the public key to confirm that the signature matches a public key signature that can only be generated using a particular private key), signing the transaction, and transmitting the signed transaction information to the mobile device.

[0011] In some embodiments, the cold storage device comprises a card having standard dimensions for transaction cards in accordance with ISO / IEC 7810:2003 ID-1, for example, a card made of metal, ceramic, glass, or a combination thereof. The card may not have a settlement module and may not have a magnetic stripe configured to interact with a card reader, or it may have at least one of a settlement module and a magnetic stripe. In other embodiments, the cold storage device comprises a key fob made of metal, ceramic, glass, or a combination thereof. The cold storage device may also comprise a biometric reader module connected to a processor and configured to restrict the operation of the cold storage device based on biometric information detected by a biometric reader.

[0012] A further aspect of the present invention relates to a processing device for mobile devices such as smartphones, having a user interface, a near-field communication (NFC) interface, and a communication interface configured to connect to a global communication network. The processing device has a digital memory and a processor, the digital memory being programmed with instructions readable by the processor of the processing device to cause the processing device to establish a secure connection with a secure element of a cryptocurrency cold storage device via NFC, to transmit information to the secure element for processing by the secure element, and to establish a cryptocurrency wallet that can operate to access a cryptocurrency network through a global communication network. Instructions readable by the processor of the processing unit are further configured to cause the processing unit to perform the following steps: (a) receiving the initiation of a transaction via a user interface, wherein the transaction corresponds to a currency value or token; establishing a secure communication link with a secure element via NFC; (c) transmitting high-level information to the secure element for processing via the NFC link; (d) receiving signed transaction information from the secure element; (e) establishing a communication session with a cryptocurrency exchange server of the cryptocurrency network via a global communication network; and transmitting the signed transaction information to the cryptocurrency exchange server to initiate a transaction that acts to send the currency value or token to the exchange server. [Brief explanation of the drawing]

[0013] [Figure 1] Figure 1 shows an exemplary system for executing cryptocurrency transactions according to an aspect of the present invention. [Figure 2] Figure 2 is a flowchart showing an exemplary process step according to an embodiment of the present invention. [Modes for carrying out the invention]

[0014] An exemplary system 100 for executing cryptocurrency transactions according to an aspect of the present invention is shown in Figure 1. The cryptocurrency cold storage device 110 includes metal, ceramic, glass, or a combination thereof and is shown in Figure 1 in the form of a transaction card such as a luxury card, with standard dimensions for a transaction card compliant with ISO / IEC 7810:2003 ID-1, namely, a length and width of 85.6 x 53.98 mm (3.4 x 2.1 inches) and a thickness of 0.76 mm (1 / 32 inch). However, unlike standard debit or credit cards, this card does not require (and therefore does not have) a magnetic stripe configured to interact with a card reader or any physical contact associated with the transaction card. Similarly, the card does not require a card number, username, or signature field. However, in other embodiments, given the potential risks of loss and the nature of information stored in the cold storage device, embodiments having user identification information may have advantages. For example, features such as a username (not shown, but well known in the art), a user photograph (not shown, but well known in the art), a user signature field (not shown, but well known in the art), and a biometric reader 12 (e.g., comprising a fingerprint or thumbprint reader for controlling access to a cold storage device) may be included. In yet another embodiment, the card may be configured to perform routine credit card or debit card transactions and thus can be configured to include all the typical trappings of a credit card, including a settlement module 10, a magnetic stripe (not shown, but well known in the art), and so on.

[0015] In some embodiments, there may be advantages to configuring a card or other form factor (such as a fob) to add authentication to a payment (e.g., using FIDO). It should be understood that in some embodiments, the card / other form factor may feature any combination of cryptography, FIDO, access control / loyalty, and / or payment, depending on the software combination.

[0016] While presented as a transaction card-sized device offering the advantage of fitting neatly into a holder's physical wallet alongside standard transaction cards, the present invention is not limited to a specific size or shape. Any form factor configured for NFC communication with mobile devices, as described herein, may be suitable. For example, a cold storage device could include a key fob, coins, or any type of physical token. Structures made of metal, ceramic, glass, or combinations thereof are preferred for durability, but the material of the structure is not limited.

[0017] The card 110 includes a secure element 112 comprising an integrated circuit having a processor 114, a digital memory 116, and a near-field communication (NFC) interface 118. The digital memory 116 of the secure element 112 includes an encryption module that embodies instructions readable by the processor 114 of the secure element, causing the secure element to store a public key and a private key encrypted in the digital memory, generate a public key using the private key, and perform signing and hashing operations.

[0018] The NFC interface may include one or more antennas, including a first antenna incorporated within an integrated circuit (IC) chip with a secure element and a second (booster) antenna comprising a layer of the card, in some embodiments, particularly in embodiments where the card is metal. In some embodiments, the metal layer of the card itself can be configured as the antenna. Configurations of metal cards having an operational NFC interface are described, for example, in U.S. Patent No. 10,318,859, entitled "Dual Interface Metal Smart Card with Booster Antenna," and in U.S. Patent No. 10,762,412, entitled "DI Capacitance Embedded Metal Card," both of which are incorporated herein by reference. While described above in relation to a payment module having a secure element for communicating with a card reader, the NFC interfaces described herein are equivalent to those used between the card and the processing device described herein.

[0019] A mobile device 120, such as a smartphone, tablet, or other type of computer, also referred to herein as a processing unit (PD), is equipped with a user interface 126 and configured to connect to a global communication network 130. The mobile device has a digital memory 122, a processor 124, and an NFC communication interface 128. The mobile device digital memory 122 is programmed with instructions readable by the mobile device's processor 124 in order to use the NFC communication interface 128 on the mobile device to cause the mobile device to establish a secure connection with the NFC interface 118 of a secure element and to transmit information to the secure element 112 for processing by the secure element. The mobile device 120 is also configured to establish a cryptocurrency wallet 129 that can operate to access a cryptocurrency network 150 via the global communication network 130. Access to the cryptocurrency network may be direct or indirect (i.e., a wallet may, as an unspecified example, directly interact with a tier 2 cryptocurrency network via the Lightning Network or via decentralized finance (DeFi) protocols on their respective chains (e.g., Compound or Uniswap)).

[0020] Instructions readable by the processor 114 of the cold storage device and the processor 124 of the mobile device, when read by their respective processors from the connected memory, can cause the system to execute the steps necessary to process a cryptocurrency transaction. In a typical process 200 summarized in the flowchart shown in Figure 2, in step 210, a transaction corresponding to the transfer of a currency with value is initiated by the user via the user interface 126 of the processing unit (PD) (e.g., mobile device 120). In step 220, the mobile device 120 establishes a communication link with a secure element (SE) via NFC between its respective NFC interfaces 118, 128, for example, a secure communication link (e.g., encrypted), and then in step 230, the mobile device transmits high-level information to the secure element for processing in communication 132. In step 240, the secure element's processor 114 retrieves a private key from memory 116, performs a hash operation using the private key to generate a signature, decrypts the private key using the public key stored in memory 116 (i.e., checks the chain associated with the public key to confirm that the signature matches a public key signature that can only be generated using a specific private key), signs the transaction, and sends the signed transaction information back to the mobile device, for example, via NFC communication 136. This communication may or may not be encrypted.

[0021] Next, in step 250, the mobile device 120 establishes a communication session with the cryptocurrency exchange server 152 of the cryptocurrency network 150 via the global communication network 130, sends signed transaction information to the cryptocurrency exchange, and initiates a transaction that will send currency value or tokens to the exchange server.

[0022] System 100 can also be configured to receive cryptocurrency deposits. Methods to facilitate such deposits may include the mobile device displaying on display 125 in an encoded format to provide the payer with the cryptocurrency address associated with the cryptocurrency wallet. For example, the address may be in the form of a barcode or QR code (registered trademark) that the payer can capture with their mobile device. The system may also read the address from NFC or other radio signals. The system can further be configured to perform any type of cryptocurrency transaction, such as purchasing cryptocurrency (i.e., using fiat currency) or swapping cryptocurrency (i.e., exchanging an amount of one cryptocurrency for an equivalent amount of another cryptocurrency).

[0023] In some embodiments, the secure element 112 may also include a payment module 10 configured to exchange payment information with a card reader to execute a purchase transaction. Such a payment module 10 does not have to be connected to a portion of the secure element to process cryptocurrency transactions, but may be connected and available to initiate a payment transaction using the secure element. In embodiments where the payment module is connected to a portion of the secure element configured to process cryptocurrency transactions, the transaction may not be initiated by the mobile device, but rather the cold storage device may establish a connection with the mobile device. This connection may prompt the initiation of a transaction, and the remainder of the transaction may be performed as described above. In embodiments where the payment module is not connected to the cryptocurrency processing unit of the secure element, the processing of a payment using the payment module may be a standard credit or debit card transaction, and the payment module may be co-located with the cold storage device for convenience only. In other embodiments, the payment transaction may prompt a standard credit or debit card transaction which is communicated to the mobile device for authorization and completion of the transaction, in which case the mobile device may then initiate a cryptocurrency transaction as described above to complete the payment. A system configured to perform both the cryptocurrency functionality and settlement transactions described herein may have a single secure element (SE) or dual SEs (for example, one located within a settlement module such as a dual interface (DI) chip and the other embedded elsewhere in the card). A single SE may have a secure "box" (i.e., a hardware or software partition within the chip that separates the settlement from the cryptographic portion of the SE, and vice versa, so that hacking the SE's settlement software does not provide a path to the cryptographic software).

[0024] In an embodiment including the biometric authentication reader 10, the biometric authentication reader 10 may be connected to the processor 114 and the memory 116. The processor receives the biometric authentication data detected by the reader, compares it with the stored biometric authentication data, and is configured to enable further processing only when it is determined by the comparison that the read data and the stored data match up to a predetermined degree of similarity. In other embodiments, biometric authentication checkpoints can be implemented on mobile devices instead of (or in addition to) the biometric authentication security provided on the card.

[0025] In an exemplary embodiment, the storage and functions related to the public key and the private key may include the first applet, and one or more second standard payment applets may also exist on the secure element without interaction between the respective applets.

[0026] Most of the sequences related to cryptocurrency transactions are well-known, such as those defined by the Bitcoin protocol or updates to BIP32 / 39, the "Bitcoin Improvement Protocol". In one embodiment, these steps are implemented within a Java (registered trademark) applet operating on the secure element. Keys are generated within the secure element, such as the Infineon Technologies SLC37 security microcontroller, and stored in encrypted form in the secure key store. The key does not leave the card and is externally recognized by its logical index, but the actual value is not recognized. All signature and hash operations are performed using the secure element. In short, the software incorporated in the card manages all the encryption primitives of the cryptocurrency. A mobile applet on the mobile device (such as one operating on the Android (registered trademark) / iOS operating system) sends the relevant high-level information to the card for processing. Then, when the mobile applet receives the signed transaction from the card, it establishes a communication session with the cryptocurrency exchange and sends this data to initiate the transaction.

[0027] In this specification, the present invention has been illustrated and described with reference to specific embodiments, but the present invention is not intended to be limited to the illustrated details. Rather, various modifications can be made in detail within the scope of the claims and the scope of equivalents without departing from the present invention.

[0028] While primarily described in relation to cryptocurrency transactions, the methods, systems, storage devices, and processing devices described herein can be used in connection with the execution of any type of transaction (not limited to financial transactions) and may include any type of public / private key authentication known in the art. For example, the storage devices described herein can be paired with a transaction application on a mobile device to execute any type of transaction, including authentication using the FIDO® standard. Transaction initiation can take any form, such as a push from a first network-connected device to a second network-connected device, or the provision of a code (e.g., QR code®) that is read by the second device and displayed (or embodied in a physical representation such as a printed document) by the first device, and may be initiated by a user using the user interface of a transaction application on a device, or by a user using a storage device that is in an active state in close proximity to a mobile device capable of exchanging information with the storage device. The initiation method is not limited to any particular method. In some embodiments, the card can also be used as an authentication token for a hot wallet or other online account using the same or similar cryptographic primitives as described above, or instead. In such embodiments, the secure element within the card can exchange cryptographic credentials via a mobile device hosting an online account. This exchange may occur during initial setup. For example, a PGP key exchange between two devices can be performed via an applet. A simple recognition token can then be validated via an encrypted channel in subsequent transactions that match the token used during initial registration. A card configured in this way functions as an independent authentication element but does not hold keys and therefore does not sign cryptocurrency transactions. The keys can be coordinated across multiple platforms through further software interactions.

Claims

1. A system for executing transactions, A storage device comprising an integrated circuit having at least a first secure element, the first secure element comprising a processor, digital memory, and a first near-field communication (NFC) interface, and the digital memory module of the first secure element executing instructions readable by the processor of the first secure element, which cause the first secure element to store a public key and a private key in the digital memory in an encrypted state, generate a public key using the private key, and perform signing and hashing operations, A processing unit having a user interface, a second NFC interface, and a communication interface configured to connect to a global communication network, wherein the processing unit has a digital memory and a processor, the digital memory of the processing unit is programmed with instructions readable by the processor of the processing unit to cause the processing unit to establish a connection with the NFC interface of the first secure element via NFC, to cause the first secure element to transmit information for processing to the first secure element, and to establish a user interface that can operate to access the transaction network via the global communication network, Instructions readable by the processor of the storage device and the processor of the processing device, when read by each of the processors, (a) The processing device receives the start of a transaction via the user interface, (b) The processing device establishes the connection with the first secure element via NFC, (c) The processing device transmits information to the first secure element via an NFC link for processing, (d) The first secure element obtains the private key, performs a hash operation using the private key to generate a signature, decrypts the private key using the public key, signs the transaction, and transmits the signed transaction information to the processing device. (e) The processing device establishes a communication session with the exchange server of the transaction network via the global communication network, and transmits the signed transaction information to the exchange server to initiate the transaction; It can be made to execute, The transaction includes a cryptocurrency transaction corresponding to a currency value or token, the storage device comprises a cryptocurrency cold storage device, the digital memory module of the first secure element comprises a crypto module, the first secure element further comprises a settlement module configured to exchange settlement information with a card reader to execute a purchase transaction, the first secure element is a single secure element, and the settlement module is separated from the crypto module by a hardware or software partition on the first secure element to prevent a communication path between the crypto module and the settlement module. system.

2. The system according to claim 1, wherein the user interface includes a virtual wallet for cryptocurrency.

3. The system according to claim 2, wherein the cryptocurrency virtual wallet is configured to indirectly access the transaction network through direct access to the second layer cryptocurrency network.

4. The system according to claim 2 or 3, further configured to receive cryptocurrency deposits, wherein the processing unit is configured to display, in an encoded format, the cryptocurrency address associated with the cryptocurrency wallet for the payer.

5. The system according to any one of claims 2 to 4, further configured to purchase or exchange cryptocurrency.

6. The system according to any one of claims 1 to 5, wherein the processing device comprises a mobile device.

7. The system according to claim 6, wherein the mobile device includes one of a smartphone, a tablet, or a laptop computer.

8. The system according to any one of claims 1 to 7, wherein the storage device comprises a card having standard dimensions for a transaction card in accordance with ISO / IEC 7810:2003 ID-1.

9. The system according to claim 8, wherein the card includes metal, ceramic, glass, or a combination thereof.

10. The system according to claim 2, wherein the storage device comprises a card having standard dimensions for a transaction card in accordance with ISO / IEC 7810:2003 ID-1, the card having no settlement module and no magnetic stripe configured to interact with a card reader.

11. The system according to claim 10, wherein the card further comprises at least one of a magnetic stripe configured to interact with a payment module and a card reader.

12. The system according to any one of claims 1 to 7, wherein the storage device comprises a key fob made of metal, ceramic, glass, or a combination thereof.

13. The system according to any one of claims 1 to 12, wherein the storage device further comprises a biometric reader module connected to the processor and configured to restrict the operation of the storage device based on biometric information detected by the biometric reader.

14. The system according to any one of claims 1 to 13, wherein the processing apparatus further comprises a biometric reader module connected to the processor of the processing apparatus and configured to restrict access from the processing apparatus to the storage device based on biometric information detected by the biometric reader.

15. The system according to any one of claims 1 to 14, wherein the connection between the processing device and the first secure element is a secure NFC communication link.

16. A storage device having an integrated circuit comprising at least a first secure element, the first secure element comprising a processor, digital memory, and a first near-field communication (NFC) interface, the digital memory of the first secure element storing a public key and a private key in an encrypted state in the digital memory, generating a public key using the private key, performing signing and hashing operations, and high-level information from a processing device, the high-level information relating to a transaction, in response to the receipt of high-level information, The module includes a module that executes instructions readable by the processor of the first secure element, causing the first secure element to perform the following steps: obtaining the private key; performing a hash operation using the private key to generate a signature; decrypting the private key using the public key; signing the transaction; and transmitting the signed transaction information to a mobile device. The storage device comprises a cryptocurrency cold storage device and a card, the transaction corresponds to a currency value or token, the module comprises a cryptographic module, the first secure element further includes a settlement module configured to exchange settlement information with a card reader to execute the transaction, the first secure element is a single secure element, and the settlement module is separated from the cryptographic module by a hardware or software partition on the first secure element to prevent a communication path between the cryptographic module and the settlement module. The processing unit comprises a user interface, a second NFC interface, and a communication interface configured to connect to a global communication network, the processing unit having a digital memory and a processor, the digital memory of the processing unit being programmed with instructions readable by the processor of the processing unit for establishing a connection to the NFC interface of the first secure element via NFC, transmitting the high-level information to the first secure element for processing by the first secure element, and establishing a user interface operable for accessing the transaction network via the global communication network, Instructions that the processor of the aforementioned processing unit can read are, (a) The user interface receives the start of the transaction, (b) The connection with the first secure element is established by NFC, (c) Information is transmitted to the first secure element for processing via an NFC link. (d) To establish a communication session with the exchange server of the transaction network via the global communication network and to send the signed transaction information to the exchange server in order to initiate the transaction, To make it possible to carry out storage device.

17. The storage device according to claim 16, wherein the card has standard dimensions for a transaction card in accordance with ISO / IEC 7810:2003 ID-1.

18. The storage device according to claim 17, wherein the card includes metal, ceramic, glass, or a combination thereof.

19. The storage device according to claim 17 or 18, wherein the card further comprises a magnetic stripe configured to interact with a card reader.

20. The storage device according to claim 16, wherein the cryptocurrency cold storage device comprises a key fob made of metal, ceramic, glass, or a combination thereof.

21. The storage device according to any one of claims 16 to 20, further comprising a biometric reader module connected to the processor and configured to restrict the operation of the storage device based on biometric information detected by a biometric reader.

22. The storage device according to any one of claims 16 to 21, wherein the communication link is a secure communication link.

23. A processing unit having a device user interface, a near-field communication (NFC) interface, and a communication interface configured to connect to a global communication network, wherein the processing unit comprises a digital memory and a processor, the digital memory of the processing unit is programmed with instructions readable by the processor of the processing unit to establish a transaction application user interface that causes the processing unit to establish a connection to a secure element of a storage device via NFC, to transmit information to the secure element for processing by the secure element, and to access a transaction network via the global communication network, and the instructions readable by the processor of the processing unit are programmed by (a) The step of receiving the start of a transaction via the device user interface, (b) The step of establishing a communication link with the secure element via NFC, (c) The step of transmitting high-level information to the secure element for processing via the NFC link, (d) The step of receiving signed transaction information from the secure element, (e) The steps of establishing a communication session with the exchange server of the transaction network via the global communication network, and sending the signed transaction information to the exchange server to initiate a transaction, Further configured to perform, The storage device is a cryptocurrency cold storage device, the transaction application user interface comprises a cryptocurrency wallet, the transaction network is a cryptocurrency network, the transaction corresponds to a currency value or token, the storage device comprises the cryptocurrency cold storage device, the secure element comprises a crypto module, the secure element further comprises a payment module configured to exchange payment information with a card reader to execute a purchase transaction, the secure element is a single secure element, and the payment module is separated from the crypto module by a hardware or software partition on the secure element to prevent communication between the crypto module and the payment module. The secure element is configured to obtain a private key, use the private key to perform a hash operation to generate a signature, use the public key to decrypt the private key, sign the transaction, and transmit the signed transaction information to the processing unit. Processing device.

24. The processing apparatus according to claim 23, wherein the processing apparatus comprises a mobile device.

25. The processing apparatus according to claim 24, wherein the mobile device includes a smartphone.

26. The apparatus according to any one of claims 23 to 25, further comprising a biometric reader module connected to the processor and configured to restrict access from the apparatus to the storage device based on biometric information detected by the biometric reader.

27. The processing apparatus according to claim 26, wherein the connection to the secure element via NFC is secure communication.

28. An authentication device comprising an integrated circuit having at least a first secure element, the first secure element comprising a processor, digital memory, and a near-field communication (NFC) interface, the digital memory of the first secure element having a module that causes the first secure element to store an authentication code in the digital memory, and to transmit authentication information to a mobile device linked to the first secure element by a communication link via the NFC interface, the authentication information comprising a module that executes instructions readable by the processor of the first secure element relating to a transaction. The authentication device is a cryptocurrency authentication device, the module comprises a cryptographic module, the transaction corresponds to a currency value or token, the first secure element further comprises a settlement module configured to exchange settlement information with a card reader to execute a purchase transaction, the first secure element is a single secure element, and the settlement module is isolated from the cryptographic module by a hardware or software partition on the first secure element to prevent communication between the cryptographic module and the settlement module. Authentication device.

29. A system for executing transactions, An authentication device comprising an integrated circuit having at least a first secure element, the first secure element having a processor, a digital memory, and a first near-field communication (NFC) interface, and the digital memory of the first secure element comprising a transaction module that executes instructions readable by the processor of the first secure element in order to cause the first secure element to store an authentication code in the digital memory, A processing device having a user interface, a second NFC interface, and a communication interface configured to connect to a global communication network, wherein the processing device comprises digital memory and a processor, the digital memory of the processing device being programmed with instructions readable by the processor of the processing device to cause the processing device to establish a connection with the NFC interface of the first secure element via NFC, to cause the first secure element to transmit communications, and to establish a transaction application user interface capable of operating to access a transaction account online via the global communication network, An online transaction account includes an encrypted public key and a private key stored in the digital memory of the transaction account, and instructions readable by the transaction account's processor for generating a public key using the private key, storing the generated public key, performing a hash operation to generate a signature, and transmitting the signed transaction information to a transaction exchange server of the transaction network. Equipped with, Instructions readable by the processor of the authentication device and the processor of the processing unit are read by the respective processors and then transmitted to the system. (a) The processing device receives the start of a transaction via the user interface, (b) The processing device establishes the connection with the first secure element via NFC, (c) The processing device transmits a communication to the first secure element via an NFC link, (d) The first secure element transmits the authentication code to the processing device, (e) The processing device establishes a communication session with the online transaction account via the global communication network and transmits the authentication code to the online transaction account, (f) The online transaction account obtains the private key, performs a hash operation with the private key to generate a signature, decrypts the private key using the public key, signs the transaction, and sends the signed transaction information to the transaction exchange server to initiate the transaction; It can be made to execute, The system comprises a cryptocurrency transaction system, the authentication device comprises a cryptocurrency authentication device, the module comprises a crypto module, the transaction application user interface comprises a cryptocurrency wallet, the online transaction account comprises a cryptocurrency account, the transaction network is a cryptocurrency network, the transaction exchange server is a cryptocurrency exchange server, the transaction comprises a cryptocurrency transaction that operates to send currency value or tokens to the transaction exchange server, the first secure element comprises a crypto module, the first secure element further comprises a settlement module configured to exchange settlement information with a card reader to execute a purchase transaction, the first secure element is a single secure element, and the settlement module is isolated from the crypto module by a hardware or software partition on the first secure element to prevent a communication path between the crypto module and the settlement module. system.

Images