Coinbase Wins Patent for Secure Bitcoin Payments System

Coinbase is looking into creating more secure digital payment platforms to help merchants accept bitcoin, a patent filing reveals.

AccessTimeIconAug 17, 2018 at 1:00 a.m. UTC
Updated Sep 13, 2021 at 8:17 a.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global hub for everything crypto, blockchain and Web3.Register Now

A newly published Coinbase patent seeks to protect a way of making bitcoin purchases more secure for customers.

In the filing, published August 14, the U.S.-based cryptocurrency exchange outlined how it could develop a payment portal which would allow users to pay using bitcoin directly from their digital wallet.

"It may be a security concern for users that the private keys of their bitcoin addresses may be stolen from their wallets," the patent stated. "Existing systems do not provide a solution for maintaining security over private keys while still allowing the users to checkout on a merchant page and making payments using their wallets."

The system as described sets up a "key ceremony" that creates key shares that are combined into an operational master key – encrypted with the users' passphrases – that can be made publicly available and deleted after use.

The operational master key is used for private key encryption during checkout, as well as for transaction signing when a payment is made.

What the filing calls "freeze logic" is also employed in the process, a security measure that automatically halts transactions if an administrator chooses to suspend the system.

The patent explains:

"At any point in time after the master key is loaded, the system can be frozen. The system can be unfrozen after it has been frozen using keys from the key ceremony. The checkout process can be carried out when the system is frozen and when the system is unfrozen. The payment process can only be carried out when the system is unfrozen."

The patent goes on to note that the system also includes an API key, meaning different websites would be able to launch their own version of the portal.

The API key would have two parts: one would be specific to the host server, while the other would be stored on the system developed by Coinbase. The two keys would have to match for a transaction to go through, adding another layer of security for customers.

Internet shopping image via Shutterstock

Disclosure

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.


Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.