Abstract: A cryptographic asset trading system comprises circuitry configured to: receive creation request for share(s) of digital fund token serving as digital representation of fund of assets, creation request comprising digital signature of first cryptographic key associated with first account; in response to receiving creation request: place respective quantity of each of plurality of different assets represented by share(s) of digital fund token into escrow account associated with cryptographic asset trading system as collateral for digital fund token; create and transfer digital fund token to first account by cryptographically signing digital fund token with second cryptographic key associated with cryptographic asset trading system; and record creation and transfer of digital fund token to first account on distributed ledger thereby requiring cryptographic signing with first cryptographic key associated with first account to: (i) redeem digital fund token from first account or (ii) transfer digital fund token fr

Abstract: An asset trading system utilizing a distributed ledger and configured to: when a creation request to create a digital fund token representing at least one share of a fund having a plurality of different assets (i) is received, (ii) is electronically signed with a private key associated with a first addressed account, and (iii) indicates a composition of the at least one share of the fund: place the plurality of different assets represented by the at least one share of the fund into an escrow account; create the digital fund token, wherein the digital fund token indicates the composition of the share of the fund; and record the creation of the digital fund token on a distributed ledger.

Abstract: A system comprises: first, second, third computing device(s) and distributed ledger(s). Third computing device(s) store PII for accounts. First computing device(s) receive request to obtain PII regarding public information for first account from first user of second computing device(s). First computing device(s) determine that the third computing device(s) includes PII regarding public information for first account. First computing device(s) determine whether first user has permission to obtain PII regarding public information for first account from third computing device(s) that includes PII regarding public information for first account. First computing device(s) receive public information for first account from distributed ledger(s) when first user has permission to obtain PII regarding public information for first account from third computing device(s) that includes PII regarding public information for first account.

Abstract: A computing device includes at least one processor configured to determine a retrieved secret share from each of at least two secret share storage devices or media that are retrieved from at least two of a plurality of shareholders. The at least one processor is also configured to determine whether each respective retrieved secret share is one of the plurality of secret shares that were generated based on whether the respective hash of the respective retrieved secret share matches any hash in the list of hashes of the plurality of secret shares within the metadata. The at least one processor is also configured to, in response to determining that each retrieved secret share is among the plurality of secret shares that were generated, attempt to reconstitute a secret using retrieved secret shares from the at least two secret share storage devices or media.

Abstract: A network node includes at least one processor, at least one memory, and at least one network interface. The network node is configured to be within a plurality of network nodes communicatively coupled in a peer-to-peer network of network nodes implementing a distributed ledger that cryptographically secures security tokens. The network node is configured to be communicatively coupled to at least one remotely located computing device through the at least one network interface. The at least one processor is configured to determine a split ratio for a new split of the security tokens held in at least one address of the distributed ledger. The at least one processor is also configured to store an indication of the split ratio without updating token balances for all of the at least one address in a list of addresses holding at least one of the security tokens.

Abstract: A network node in a peer-to-peer network of nodes includes at least one processor, at least one memory, and at least one network interface. The at least one processor is configured to receive a request to transfer a security token and execute a plurality of compliance rules associated with the security token. At least one of the compliance rules is implemented using at least one smart contract. The at least one smart contract references a global registry. The at least one processor is also configured to transfer the security token based on the execution of the compliance rules. The global registry includes personally identifiable information (PII) hash(es) for each of at least one investor associated with the transfer of the security token. The hashes are committed to the distributed ledger and updated when PII of a respective one of the at least one investor changes.

Abstract: A system includes at least one processor and at least one memory communicatively coupled to the at least one processor. The at least one processor is configured to receive a plurality of doubly-encrypted secret parts that were encrypted using at least a public key belonging to a public/private keypair. The at least one processor is also configured to decrypt each of the plurality of doubly-encrypted secret parts into a corresponding singly-encrypted secret part using a private key belonging to the public/private keypair. The at least one processor is also configured to decrypt each corresponding singly-encrypted secret part into a corresponding secret part. A secret is reconstructed from a quantity of corresponding secret parts that is a subset of a total number of secret parts. The public key, the private key, or both are rotated by creating a new version of the public key, the private key, or both.

Abstract: A computing device includes at least one processor configured to determine a retrieved secret share from each of at least two secret share storage devices or media that are retrieved from at least two of a plurality of shareholders. The at least one processor is also configured to determine whether each respective retrieved secret share is one of the plurality of secret shares that were generated based on whether the respective hash of the respective retrieved secret share matches any hash in the list of hashes of the plurality of secret shares within the metadata. The at least one processor is also configured to, in response to determining that each retrieved secret share is among the plurality of secret shares that were generated, attempt to reconstitute a secret using retrieved secret shares from the at least two secret share storage devices or media.

Abstract: In an example, a system comprises at least one processor, at least one memory communicatively coupled to the processor, and at least one network interface communicatively coupled to the processor. The processor is configured to: receive an intent to purchase a token into a transaction address from a remote computing device; receive signed data, signed by a private key, from the computing device; receive at least one of the transaction address or public key associated with the transaction address from the computing device; verify that the transaction address or the public key is associated with the private key; verify that the transaction address or the public key is whitelisted to purchase the token; and allow purchase of the token into the transaction address when the target transaction address or the public key is both: (1) associated with the private key and (2) whitelisted to purchase the token.

Abstract: A computerized method includes receiving payment of an amount of cryptocurrency from a transaction account to another account. The computerized method also includes, when the payment of the amount of cryptocurrency is received at the another account from the transaction account, causing at least one of KYC, AML, and accredited investor review to be performed for an owner of the account. The computerized method also includes, when the at least one of the KYC, AML, and accredited investor review causes a status of the owner of the account to change, at least one of adding or removing at least one indication of the owner's status to a distributed ledger.

Abstract: A computing device includes at least one processor and at least one memory communicatively coupled to the at least one processor. The at least one processor is configured to determine a secret to be protected. The at least one processor is also configured to split the secret into a plurality of secret shares, at least a subset of which are required to reconstitute the secret. The at least one processor is also configured to transfer each secret share to a respective portable storage device or media for distribution to a respective shareholder. The at least one processor is also configured to generate metadata with at least a hash of each secret share, wherein the metadata is stored separate from the portable storage devices or media with the secret shares.

Abstract: A network node includes at least one processor, at least one memory, and at least one network interface. The network node is configured to be within a plurality of network nodes communicatively coupled in a peer-to-peer network of network nodes implementing a distributed ledger. The network node is configured to be communicatively coupled to at least one remotely located computing device through the at least one network interface. The at least one processor is configured to determine a split ratio for a new split of security tokens held in at least one address of the distributed ledger. The at least one processor is also configured to store an indication of the split ratio without updating token balances for all of the at least one address in a list of addresses holding at least one of the security tokens.

Abstract: A system includes: a plurality of network nodes communicatively coupled in a peer-to-peer network; and a plurality of computing devices each communicatively coupled to at least one of the plurality of network nodes. Computing devices transmit market trade requests to at least one of the network nodes. A first subset of network nodes (including at least two network nodes) determine an order of receipt of the plurality of market trade requests. The first subset of network nodes reach a consensus of the order of receipt of the plurality of market trade requests. The first subset of network nodes generate ordered data based on the order of receipt agreed upon by the first subset of network nodes. A second subset of network nodes (including at least two network nodes) match the plurality of market trade requests.

Abstract: A network node in a peer-to-peer network of nodes includes at least one processor, at least one memory, and at least one network interface. The at least one processor is configured to receive a request to transfer a security token and execute a plurality of compliance rules associated with the security token. At least one of the compliance rules is implemented using at least one smart contract. The at least one smart contract references a global registry. The at least one processor is also configured to transfer the security token based on the execution of the compliance rules. The global registry includes personally identifiable information (PII) hash(es) for each of at least one investor associated with the transfer of the security token. The hashes are committed to the distributed ledger and updated when PII of a respective one of the at least one investor changes.

Abstract: A system includes processor(s) and memory(s). When encryption key(s) need to be generated to encrypt a key, processor(s): generate encryption key(s); encrypt key using encryption key(s) to generate encrypted key; split encrypted key and encryption key(s) into set(s) of key components, wherein subset of key components can be used to reconstruct encrypted key and encryption key(s); and erase key from memory(s). When encryption key(s) need to be used, processor(s): receive set(s) of key components from subset(s) of users that can be used to reconstruct encrypted key and encryption key(s) used to decrypt key from encrypted key; when set(s) of key components is received from subset(s) of users that can be used to reconstruct encrypted key and encrypted key(s), reconstruct encrypted key and encryption key(s); and when the encrypted key and the encryption key(s) have both been reconstructed, decrypt encrypted key into key using encryption key(s).

Abstract: A system includes at least one processor and at least one memory communicatively coupled to the at least one processor. The at least one processor is configured to receive a plurality of doubly-encrypted secret parts that were encrypted using at least a public key belonging to a public/private keypair. The at least one processor is also configured to decrypt each of the plurality of doubly-encrypted secret parts into a corresponding singly-encrypted secret part using a private key belonging to the public/private keypair. The at least one processor is also configured to decrypt each corresponding singly-encrypted secret part into a corresponding secret part. A secret is reconstructed from a quantity of corresponding secret parts that is a subset of a total number of secret parts. The public key, the private key, or both are rotated by creating a new version of the public key, the private key, or both.

Abstract: A network node in a peer-to-peer network of nodes includes at least one processor, at least one memory, and at least one network interface. The at least one processor is configured to receive a request to transfer a security token and execute a plurality of compliance rules associated with the security token. At least one of the compliance rules is implemented using at least one smart contract. The at least one smart contract references a global registry. The at least one processor is also configured to transfer the security token based on the execution of the compliance rules. The global registry includes personally identifiable information (PII) hash(es) for each of at least one investor associated with the transfer of the security token. The hashes are committed to the distributed ledger and updated when PII of a respective one of the at least one investor changes.

Abstract: An asset trading system utilizing a distributed ledger and configured to: when a creation request to create a digital fund token representing at least one share of a fund having a plurality of different assets (i) is received, (ii) is electronically signed with a private key associated with a first addressed account, and (iii) indicates a composition of the at least one share of the fund: place the plurality of different assets represented by the at least one share of the fund into an escrow account; create the digital fund token, wherein the digital fund token indicates the composition of the share of the fund; and record the creation of the digital fund token on a distributed ledger.

Abstract: A system includes at least one processor and at least one memory communicatively coupled to the at least one processor. The at least one processor is configured to receive a plurality of doubly-encrypted secret parts that were encrypted using at least a public key belonging to a public/private keypair. The at least one processor is also configured to decrypt each of the plurality of doubly-encrypted secret parts into a corresponding singly-encrypted secret part using a private key belonging to the public/private keypair. The at least one processor is also configured to decrypt each corresponding singly-encrypted secret part into a corresponding secret part. A secret is reconstructed from a quantity of corresponding secret parts that is a subset of a total number of secret parts previously created from the secret.

Abstract: An asset trading system utilizing a distributed ledger and configured to: when a creation request to create a digital fund token representing at least one share of a fund having a plurality of different assets (i) is received, (ii) is electronically signed with a private key associated with a first addressed account, and (iii) indicates a composition of the at least one share of the fund: place the plurality of different assets represented by the at least one share of the fund into an escrow account; create the digital fund token, wherein the digital fund token indicates the composition of the share of the fund; and record the creation of the digital fund token on a distributed ledger.