Abstract: A digital asset custodial system for maintaining custody of, and controlling access to, cryptocurrencies and/or other digital assets, is disclosed. The digital asset custodial system includes multiple layers of security to enable large volumes of digital assets to be maintained in a secure manner. The digital asset custodial system can include a combination of biometric-based multi-user validation, transaction risk analysis, and a hardware security module (HSM) that provides authentication/validation functionality and secure storage of private keys of digital assets.

Abstract: Methods, systems, and apparatus, including medium-encoded computer program products, for secure storage and retrieval of information, such as private keys, useable to control access to a blockchain, include, in at least one aspect, a method including: receiving a request to take an action with respect to a vault of multiple different vaults in a cryptoasset custodial system; authenticating, by an HSM, the policy map for the vault based on a cryptographic key controlled by the HSM; checking, by the HSM, the action against the policy map for the vault when the policy map for the vault is authenticated based on the cryptographic key controlled by the HSM; and effecting, by the HSM, the action when the action is confirmed to be in accordance with the policy map for the vault.

Abstract: A method of reconstructing a packet that includes financial card information from a mobile device uses a card reader. The card reader has a read head, a slot for swiping a magnetic stripe of a card and device electronics that includes a microcontroller with logic resources with code. The card reader has a unique identifier and associated cryptographic key. The same code is used to produce an encrypted and signed signal. The encrypted and signed signal, that includes the card reader identifier, is sent to the mobile device. The mobile device sends an encrypted and signed packet to a back end of a payment system. A cryptographic key is used to decrypt and verify the contents of the packet at the back end. Non-encrypted financial card information is sent to a payment gateway.

Abstract: A method of transmitting encrypted information to a mobile device and a payment service uses a card reader. The card reader has device electronics that include a microcontroller with logic resources with code and an output jack. A raw magnetic head signal is received from a reading of the card in the slot. The raw magnetic head signal is converted into a processed digital signal that the microcontroller can interpret. The logic resources and the code create both an encryption and signed signal. An encrypted and signed output jack message is delivered to the mobile device through the output jack based on the contents of the signal, with at least a portion of the output jack signal being encrypted.

Abstract: A mobile device can send an identification code of a card reader coupled to the mobile device to a server system. In response to sending the identification code, the mobile device can receive a cryptographic key from the server system. The mobile device can receive a passcode via a user interface of the mobile device. The mobile device can then utilize the cryptographic key from the server system to facilitate secure communication between the card reader and the mobile device. Secure communication, for example, includes encrypting the passcode using the cryptographic key before sending the encrypted passcode from the mobile device to the card reader.

Abstract: A method of encrypting sensor input entries for passcode entry security is disclosed. The method in one embodiment includes presenting a passcode entry interface on an electronic device for a user to input a passcode entry. The electronic device then receives an input event, which is indicative of at least part of the passcode entry by the user, from a sensor of the electronic device. The electronic device then encrypts a sensor value of the input event and transmits the encrypted sensor value to an external system over a network to cause the external system to decipher the passcode entry from the encrypted sensor value.

Abstract: A card reader has a housing, read head and device electronics that receive a raw signal from the read head and converts it into a processed digital signal that the microcontroller can interpret. A microcontroller with associated logic resources and code receives a digital signal from the device electronics and creates an encrypted and signed message based on the contents of the signal. An output jack is provided.

Abstract: A method of transmitting encrypted information to a mobile device and a payment service uses a card reader. The card reader has device electronics that include a microcontroller with logic resources with code and an output jack. A raw magnetic head signal is received from a reading of the card in the slot. The raw magnetic head signal is converted into a processed digital signal that the microcontroller can interpret. The logic resources and the code create both an encryption and signed signal. An encrypted and signed output jack message is delivered to the mobile device through the output jack based on the contents of the signal, with at least a portion of the output jack signal being encrypted.

Abstract: A method of reconstructing a packet that includes financial card information from a mobile device uses a card reader. The card reader has a read head, a slot for swiping a magnetic stripe of a card and device electronics that includes a microcontroller with logic resources with code. The card reader has a unique identifier and associated cryptographic key. The same code is used to produce an encrypted and signed signal. The encrypted and signed signal, that includes the card reader identifier, is sent to the mobile device. The mobile device sends an encrypted and signed packet to a back end of a payment system. A cryptographic key is sued to decrypt and verify the contents of the packet at the back end. Non-encrypted financial card information is sent to a payment gateway.