Abstract: Systems and methods for providing multiple-secret signing receive, by a wallet service, an instruction to initiate a transaction; request, by the wallet service, an address from an address service; generate, by the address service, a secret derivation path; encrypt, by the address service, the secret derivation path with a first public key of a signing service, in which the address is transmitted to the wallet service with the encrypted secret derivation path; retrieve by the wallet service, transaction information for the address; receive, by the signing service, the instruction, the transaction information, and the address with the encrypted secret derivation path; decrypt, by the signing service, the secret derivation path, using a first private key of the signing service; derive, by the signing service, a second private key, using the decrypted secret derivation path; and sign, by the signing service, the transaction using the derived second private key.

Abstract: Systems and methods are disclosed for validating an instruction using one or more digital signatures. A processor receives an instruction to initiate a transaction and generates one or more digital certificates corresponding to multiple attestations. The system validates one or more policy limits, signs the instruction using a first subset of the certificates, and instantiates an instruction workflow. Upon completion of the workflow, the instruction or workflow is signed using a second subset of the certificates. A transaction request is then built including the instruction and one or more digital signatures, which may comprise a combined or aggregated digital signature derived from multiple individual signatures.

Abstract: Systems and methods for validating an instruction with multiple digital signatures may receive an instruction to initiate a transaction; generate first and second digital certificates; validate a set of one or more policy limits; sign the instruction using the first digital certificate, based on the validating; instantiate an instruction workflow associated with the transaction; sign the instruction workflow using the second digital certificate, based on completion of the instruction workflow; build a transaction request, in which the transaction request includes at least the instruction, the first signature, and the second signature; verify the first and second signatures; and sign the transaction request.

Abstract: Systems and methods for providing multiple key encryption may generate a private key encryption key (KEK) and a corresponding public KEK in a trusted execution environment (TEE); provide the public KEK to a key generator; generate, by the key generator, a data encryption key (DEK) and encrypt the DEK with the public KEK; obtain, by a key processor, an ephemeral public key and the encrypted DEK, and send the ephemeral public key and the encrypted DEK to the TEE; decrypt, by the TEE, the encrypted DEK using the private KEK, and re-encrypt the decrypted DEK with the ephemeral public key; obtain, by the key processor, the re-encrypted DEK from the TEE and pass the re-encrypted DEK to a signing service; decrypt, by the signing service, the re-encrypted DEK using a corresponding ephemeral private key; and encrypt, by the signing service, data using the DEK.

Abstract: Systems and methods for providing multiple-secret signing receive, by a wallet service, an instruction to initiate a transaction; request, by the wallet service, an address from an address service; generate, by the address service, a secret derivation path; encrypt, by the address service, the secret derivation path with a first public key of a signing service, in which the address is transmitted to the wallet service with the encrypted secret derivation path; retrieve by the wallet service, transaction information for the address; receive, by the signing service, the instruction, the transaction information, and the address with the encrypted secret derivation path; decrypt, by the signing service, the secret derivation path, using a first private key of the signing service; derive, by the signing service, a second private key, using the decrypted secret derivation path; and sign, by the signing service, the transaction using the derived second private key.

Abstract: During the dynamic generation of an auto-generated schematic, an arrangement of groupings on a page is controlled to minimize white space between on a page. The white space is compressed to minimize the number of pages for a schematic drawing having multiple pages. The compression process ensures that the coordinates generated by a compression process fall on the snap grid of an auto-generated drawing.