Abstract: Various embodiments are generally directed to utilizing an offline and/or online verification or authentication protocol to access, redeem, or otherwise utilize multiple loyalty points and loyalty accounts A method for utilizing various loyalty points includes: receiving, by an application executing on a processor, a request to redeem at least one loyalty point of a plurality of loyalty points of a loyalty points account, receiving, by the application, a cryptogram from a contactless card associated with an account, transmitting, by the application to a server, the cryptogram, determining, by the application based on a decryption result received from the server, that the server decrypted the cryptogram, and authorizing, by the application based on the determination that the server decrypted the cryptogram, the request to redeem the at least one loyalty point.

Abstract: The method, system, and computer-readable medium facilitate a fast rental application. A method may include receiving a login corresponding to a profile in a profile repository; receiving second data corresponding to the user associated with the profile from one or more search databases; automatically determining categories of a plurality of categories to which the second data belongs using a trained machine learning algorithm; retrieving the first data from one or more databases; generating updated user data corresponding to the user associated with the profile based upon at least the first data and the second data; storing at least the updated user data in the profile; and updating a rental application based on at least the updated user data.

Abstract: A method including receiving a first application user credential associated with a user profile; comparing, for a first match, the first application user credential with a stored second application user credential, wherein the stored second application user credential is associated with a user identity; and responsive to finding a first match, verifying the user identity by performing the following: communicating with a card using near field communication; receiving a public key of a key pair of the card and cardholder identification information of an account holder of the card; instructing the card to generate a digital signature; receiving the digital signature from the card; verifying the digital signature using the public key; and comparing, for a second match, at least a portion of the user identity with at least a portion of the cardholder identification information.

Abstract: A computer-implemented method to participate in a token transfer process for transferring a first quantity of token from a sender node to a recipient node using a blockchain is disclosed. The method comprising: joining a token transfer process as a participating node in the indirect anonymous transfer protocol; obtaining a list of indirect token transactions for which the first node is either an input node or an output node for in the indirect anonymous transfer protocol; generating, in collaboration with other participating nodes of the indirect anonymous transfer protocol, a commitment channel between the first node and each of the other participating nodes for which an indirect token transaction identified in the list obtained by the first node, and collaborating with all the other participating nodes and executing the indirect token transactions in which the first node is involved, using the generated commitment channels.

Abstract: A system for enabling communication between blockchains on heterogeneous blockchain networks. The system can include a sending blockchain network comprised of a sending blockchain that includes a plurality of blocks, each block including a block header and one or more transaction values associated with an identification request transmitted by the sending blockchain. The system can include a directory service node configured to receive the identification request from the sending blockchain, and identify a receiving blockchain, which forms part of a receiving blockchain network. The system can include an identity service node configured to receive a trust request from the directory service node to determine whether a valid trust certificate is available for the receiving blockchain, and enable communication between the sending blockchain and the receiving blockchain, when the valid trust certificate is determined to be available.

Abstract: A computing device, a computer program product, and a computer-implemented method for delivering enhanced financial services and, more particularly, for facilitating enhanced network communication between a user and a financial institution via a client device. A digital financial management platform for the client device is provided that includes one or more user-engageable use restriction input settings to enable one or more use restrictions on one or more user-authorized financial payment instruments associated with one or more financial accounts maintained by the user at a financial institution. The one or more user-engageable use restriction input settings includes a predetermined spend limit input setting having a predetermined maximum spend limit that is based on a current user status level among a plurality of user status levels associated with the one or more financial accounts.

Abstract: Participants as requestors using a requesting network element request one or more tokenization processors to generate tokens that represent a sanitized version of data such that the resultant tokens are amenable to comparison across participants. As circumstances warrant, one or more such tokens can be submitted to the tokenization processor(s) to privately retrieve the original data. Role-based access control scope parameters and tokenization processor-specific tokenization processor secrets can be embedded into reversible tokens that remain invariant under updating of the tokenization processor secrets across tokenization processors.

Abstract: A method and an apparatus for improving a reading and writing speed of a contactless card, a terminal device, and a computer-readable storage medium. The method includes: running a driver of a POS terminal; obtaining a communication signal between the driver and an interface chip, in which data to be read and written of the contactless card are obtained by the interface chip according to the communication signal, and wherein data interaction are performed between a card reader on which the interface chip located and the contactless card; obtaining a timing waveform diagram of the driver according to the communication signal; obtaining a running time of the driver according to the timing waveform diagram; modifying the driver to shorten the running time of the driver according to the running time and a preset driver modification rule.

Abstract: A method of generating a certificate smart contract including receiving a certificate smart contract transaction to create a certificate smart contract from an owner of a blockchain wallet, generating a certificate smart contract responsive to the certificate smart contract transaction at a certificate smart contract address on a blockchain network, receiving a new certificate transaction to create a new certificate to be included by the certificate smart contract from a validator, and saving a certificate to the certificate smart contract responsive to the new certificate transaction. The certificate smart contract includes an identity smart contract.

Abstract: System and methods for managing third party tokens and transaction across issuer ecosystems are disclosed. In one embodiment, in an information processing device comprising at least one computer processor, a method for managing payment tokens may include: (1) a first computer program associated with a financial institution and executed by the information processing device accessing a payment token associated with a second computer program executed by the information processing device; (2) the first computer program identifying the payment token as associated with a financial instrument issued by the financial institution; (3) a backend for the financial institution generating an association between the payment token and the financial institution; and (4) the backend for the financial institution communicating the association to an authorization platform for the financial institution.

Abstract: There are provided systems and methods for flexible digital tokens with application programming interfaces for reduced computing calls. A service provider, such as an electronic transaction processor for digital transactions, may provide a processing system, stack and API that allows for generation of flexible payment tokens that can be used for electronic transaction processing with external service providers including social networking platforms and services. The processing system for the transaction processor may include an API in a compatible language with the APIs of the external service providers. Specific API calls and queries, which may correspond to GraphQL mutations, may be used to execute operations between the APIs of the interfacing systems to have a legacy processing system and API to generate a billing agreement. Once generated, the billing agreement may be tokenized, and a payment token used for payment processing.

Abstract: A methods and system of hosted thin-client payment authorization and authentication services for processing payments for value-added service (VAS) providers is described. A method, performed by a host server operating a thin-client device, includes receiving transaction request data at a host server computer from a thin-client device, where the transaction request data can include financial account data and biometric data. The host-server transmits a verification request message to a VAS provider and receives an indication that it is a valid merchant. The host-server transmits an authorization request message comprising the biometric data to a payment processing network (PPN), where the PPN communicates with an authentication server computer to validate the biometric data, sends the authorization request message to an issuer and receives an authorization response message from the issuer.

Abstract: In payment using biometric authentication, a customer-friendly technology with a high degree of freedom for customers to select a payment destination is provided. The present invention provides a biometric authentication payment system including: a biometric information acquisition device that acquires biometric information of a customer; a reception section that receives designation of a payment system of a payment destination; a transmission section that transmits the biometric information and a payment amount to the payment system; an authentication section that performs authentication using the transmitted biometric information, and a payment section that performs the payment of the payment amount when the authentication result is successful in authentication, and when a payment destination is designated.

Abstract: A system and method are provided for the secure sharing of information across and open network and for performing management of keys used for encrypting and decrypting data.

Abstract: The present invention discloses a method or a system for verifying, storing and tokenizing data in cryptocurrency mining process by exchanging user data anonymously.

Abstract: A booking management system for secure authentication of payment information and delayed transaction processing is provided. Third-party services partner with booking management systems to aggregate and list offerings of the third-party services in a digestible display on a one-stop platform. A booking management system can manage the authentication of payment card information on behalf of any number of such third-party services. The booking management system may receive a delayed transaction request from one or more such third-party service. The booking management system may provide virtual payment information to the third-party services for delayed transactions. The third-party services may later initiate the delayed transactions using the virtual payment information, without being required to perform authentication processing on the payment card information maintained by the booking management system.

Abstract: Example methods and apparatus for combining electronic payment and rewards redemption at retail points of sale are disclosed. A point of sale (POS) system may be configured to facilitate contactless payments while securing customer payment data. When a customer with a payment application installed on a mobile device initiates a transaction, the application obtains reference data associated with a customer account from an account services server of the POS. The reference data is then passed from the application of the mobile device to a POS terminal, such as by near field communication. Upon receiving the token, the POS terminal obtains customer payment data from the account services server and rewards program data for the customer from a rewards program server. Available rewards may be automatically applied prior to processing payment using the payment data to complete the contactless payment transaction.

Abstract: A content wallet includes a network module configured to communicate with a terminal device; and a toggle switch configured to control a connection between an external memory inserted into an accommodation groove and the network module, in which content stored in the external memory is transmitted to the terminal device through the network module, when the external memory and the network module are connected according to a manipulation of a user for the toggle switch.

Abstract: Methods, systems, and techniques for private identity verification involve obtaining a cryptographically secure commitment that is generated using a first user identifier and a private user identifier associated with the first user identifier; receiving, from an identity verification system, initial zero knowledge proof messages comprising the commitment; sending, to the identity verification system, a set of cryptographically secure known identifier commitments generated using a set of private user identifiers; receiving, from the identity verification system: (i) a zero knowledge proof response generated using the zero knowledge proof challenge; and (ii) proof that the private user identifier used in the initial zero knowledge proof messages comprises part of the set of private user identifiers; and verifying that the private user identifier used in the initial zero knowledge proof messages comprises part of the set of private user identifiers.

Abstract: Method for the secure execution of programs (smart contracts) implemented between a first wallet node (WN) (WN1) and a second wallet node (WN2), at least the second WN being implemented in an enclave of a processor, and the WNs being capable of executing programs designated in the messages that reach them, the method comprising the following steps: a) sending by WN1 to WN2 of a pre-message; b1) in response to this pre-message, execution in the enclave of a first program (WNRoT); b2) generation by the enclave of a certificate of authenticity of said first program and of the integrity of its execution; b3) sending said certificate to WN1; c) verification by WN1 of said certificate; d) in the event of successful verification, sending by WN1 to WN2 of a message intended to trigger the execution of a given program in WN2, and e) execution of said program in WN2.

Abstract: Techniques for implementing trustless deterministic state machines using a blockchain infrastructure and running state machines concurrently over one or more transactions are described. An initial transaction is created to include at least one initial locking script that includes a first set of constraints, a second set of constraints, and at least one redeemable value. An unlocking blockchain transaction is also created with an input comprising an unlocking script and respective transaction outputs for a first locking script and a second locking script. Upon processing the initial locking script and the unlocking script, the first set of constraints and the second set of constraints are determined. Next, the first and second locking scripts are verified to ensure that they satisfy the first and second sets of constraints. Finally, the initial transaction is caused to be validated at a node of a blockchain network.

Abstract: A method of transferring information with verification from a first party to a second party using suitably programmed computing apparatus is described. Information from a first party private address to a first party public address. This information is then sent from the first party public address to a second party address. The information is also provided for public recordal on a block of a block chain for verification. The first party private address is not communicated to the second party but the first party public address is communicated to the second party. This approach is particularly suitable for transfer of cryptocurrency, as it allows for an effective refund mechanism. Computing apparatus and application software adapted to implement this approach is also described.

Abstract: An expedited payment service may be accessed through a browser extension. As an extension operates in a manner in which it has access to the underlying merchant data, the extension may allow an expedited payment service to work with virtually any merchant web site to complete payment transactions.

Abstract: Disclosed are various embodiments for a point of sale terminal for a mobile device. In some embodiments, a system comprises a computing device that is configured to receive a transmission for a mobile device from a merchant and establish a first network connection with a virtual terminal system for the merchant. The virtual terminal system is activated and a first identifier for the mobile device is received through the first network connection. The first identifier is matched with a second identifier from an information database. A second network connection is established with the POS terminal for the second identifier. A payment token for a transaction is received from the POS terminal through the second network connection. A transaction acceptance is communicated through the first network connection to the virtual terminal system for the merchant.

Abstract: A method, apparatus, and computer-readable medium for artifact attribution is provided. The method can be performed by a generative system, or generative AI. The method can include storing a proprietary artifact created by a creator and terms of use for usage of the proprietary artifact defined by the creator. The method can also include generating a new artifact based on the proprietary artifact and the user's rights to the proprietary artifact. The method can also include determining an attribution for the new artifact.

Abstract: A system and method for oblivious information retrieval are disclosed. A particular embodiment includes: a plurality of network nodes in data communication with each other via a network, each network node having a secure processing enclave, the enclave configured to include: at least one isolated memory device, processing logic isolated from operating system (OS) calls, and a remote attestation capability; and a view node in data communication with the plurality of network nodes and a transaction ledger, the view node including an account index horizontally scaled across a plurality of computing devices, the view node further configured to receive a transaction and a corresponding account hint, to decrypt the account hint, and to add a row corresponding to the transaction and the account hint to the account index.

Abstract: A computer-based system for facilitating the execution of law enforcement duties is disclosed. More particularly, according to one aspect of the invention, an electronic system is configured to facilitate the performance of law enforcement duties by quasi-instantaneously providing actionable intelligence to its users, such as front-line law enforcement officers, in response to a real-time query. According to another aspect of the invention, a system implements a set of automated status classifications for subjects with suspected or confirmed involvement in criminal activities. The status classifications specifically and concisely establish the subject's involvement in criminal activities. According to yet another aspect of the invention, a system executes a streamlined electronic process for handling and processing seized items so as to ensure that criminal assets are efficiently and effectively seized, and that asset forfeiture actions are effectively initiated against the seized items.

Abstract: In a first party mode, a peer-to-peer transfer application: authenticates the party to an identity server; obtains an amount of funds to be transferred; causes the identity server to establish a session for storing information relating to the transaction; provides the amount to the identity server; provides account information for the party to the identity server; obtains a token unique to the transaction; obtains contact information for the counterparty; and provides a message including the token to the counterparty to indicate the transaction has been initiated. In a second counterparty mode, the application: receives a message including a token for a transaction from a first party; authenticates the counterparty; determines the counterparty wishes to complete the transaction; and uses the token to provide account information for the counterparty to the identity server for storing in association with an established session and to enable the identity server to complete the transaction.

Abstract: A method for dispute resolution for a blockchain transaction includes: receiving, by a receiver of a processing server, a blockchain transaction identifier and a dispute reason code from a first computing device of a blockchain network, the blockchain transaction identifier and the dispute reason code comprising a dispute request, the blockchain transaction identifier identifying a transaction on a blockchain; transmitting, by the receiver of a processing server, the blockchain transaction identifier and the dispute reason code to a processing device of the processing server; identifying, by the processing device of the processing server, the transaction, a merchant blockchain address, and a currency amount within a blockchain data value of the blockchain based on the blockchain transaction identifier; determining, by the processing device of the processing server, the transaction is invalid; and performing, by the processing device of the processing server, a dispute resolution process for the blockchain tra

Abstract: Disclosed herein are systems and methods for interacting with a consumer ledger. The systems and methods include: receiving a copy of the consumer ledger from one of a plurality of miners; adding a transaction to the consumer ledger; and transmitting the consumer ledger to the plurality of miners for conformation.

Abstract: Methods and apparatuses allow an insurance agency to track their current performance in managing existing customers and bringing in new customers. A tool may obtain information from a user regarding characteristics of the user's agency and/or agency goals. The tool may use this information to determine an agency's business efficiency. The tool may also provide advice regarding marketing spending and/or additional human resources needed. The tool may benchmark an insurance agency against other agencies in the market. The tool may also display how generated leads are converted to new business and/or income for an agency.

Abstract: A method for processing cryptographic currency transactions through user-based blockchain ledgers includes: receiving, by blockchain node in a blockchain network, a new cryptographic currency transaction from a first computing device including unspent transaction outputs, a sender public key, receiver public key, destination address, and cryptographic currency amount; identifying, by the blockchain node, a sending blockchain associated with the sender public key including the unspent transaction outputs; validating, by the blockchain node, the sending blockchain by generating a hash value using the sending blockchain and comparing the generated hash value to a historic sender hash value associated with the sender public key; generating, by the blockchain node, a new sender hash value by hashing a combination of the sending blockchain and the new cryptographic currency transaction; and transmitting, by the blockchain node, the generated new sender hash value to a plurality of additional nodes in the blockchain

Abstract: A scheme for identifying wireless devices by capturing out-of-band information in addition to in-band information from wireless devices for enabling accurate classification of wireless devices. Both the in-band and out-of-band spectrum emissions of the received signal are used to capture hardware signatures and features. These hardware signatures are used to discriminate different wireless devices uniquely and efficiently, even when the devices have the same hardware with significantly reduced distortions. The out-of-band information can be extracted using radios with software defined capabilities. Deep learning-based device classification technique is applied that uses IQ samples collected from the RF signals to efficiently identify and classify high-performing transmitters that have the same, minimally distorted hardware components.

Abstract: Participants as requestors using a requesting network element request one or more tokenization processors to generate tokens that represent a sanitized version of data such that the resultant tokens are amenable to comparison across participants. As circumstances warrant, one or more such tokens can be submitted to the tokenization processor(s) to privately retrieve the original data. Role-based access control scope parameters and tokenization processor-specific tokenization processor secrets can be embedded into reversible tokens that remain invariant under updating of the tokenization processor secrets across tokenization processors.

Abstract: A method for ensuring precedence for the processing of a blockchain transaction to prevent loss of cryptographic currency includes receiving a new blockchain transaction by a blockchain node in a blockchain network, confirming the new blockchain transaction including identifying a precedence transaction that was previously conducted and stored in the blockchain that involves both blockchain wallets included in the new blockchain transaction, including the new blockchain transaction in a new block that is generated, and distributing the new block to additional nodes in the blockchain network for confirmation and addition to the blockchain.

Abstract: A method is provided for performing a transaction. The method includes, in an offline mode, payee and payer devices communicating to determine transaction details including a transaction amount. A payer payment application generates a transaction request including request transaction details, stores the transaction request, and updates a payer available funds amount at least partially in accordance with the transaction amount. A payee payment application generates a transaction confirmation including confirmation transaction details, stores the transaction confirmation, and updates a payee available funds amount at least partially in accordance with the transaction amount.

Abstract: A method for generation of an application cryptogram for use in a payment transaction includes: storing, in a first memory, a single use key associated with a transaction account; electronically transmitting the single use key to a processing server; receiving an encrypted session key and a server encryption key from the processing server; executing a first query to store the encrypted session key in the first memory and a second query to store the server encryption key in a second memory; decrypting the encrypted session key using the server encryption key; generating an application cryptogram based on the decrypted session key; and electronically transmitting the generated application cryptogram for use in a payment transaction.

Abstract: A method for securing a split private key (such as used with a cryptocurrency or other non-custodial electronic wallet) amongst a password, biometrics, and a social service. The process may use a sharding scheme such as Shamir's Secret Sharing to ensure that multiple key shards must be obtained before the entire private key can be obtained. The user may select the number of shards required to retrieve the private key thereby controlling the security of the account. An additional shard may be held on an encrypted server and allows for account recovery even while maintaining non-custodial ownership of the wallet.

Abstract: Decentralized computer systems and methods are disclosed for hyperledger-based payment transactions, alerts, and dispute settlement, using smart contracts. One method includes: receiving transaction information comprising transaction data of transaction attributes for a transaction for a good or service originating at a merchant; storing the transaction data of the transaction attributes for the transaction, in a smart contract generated or updated by a smart contract application; deploying the Smart contract into one or more blockchain networks, wherein at least one of the one or more blockchain networks; performing one or more iterations of enabling, using an inter ledger protocol, to transfer at least some of the transaction data of the transaction attributes of the transaction to another of the one or more blockchain networks, wherein each of the one or more blockchain networks serves one or more business functions of the transaction.

Abstract: The ELECTRONIC WALLET CHECKOUT PLATFORM APPARATUSES, METHODS AND SYSTEMS (“EWCP”) transform customer purchase requests triggering electronic wallet applications via EWCP components into electronic purchase confirmation and receipts. In one implementation, the EWCP receives a merchant payment request, and determines a payment protocol handler associated with the merchant payment request. The EWCP instantiates a wallet application via the payment protocol handler. The EWCP obtains a payment method selection via the wallet application, wherein the selected payment method is one of a credit card, a debit card, a gift card selected from an electronic wallet, and sends a transaction execution request for a transaction associated with the merchant payment request. Also, the EWCP receives a purchase response to the transaction execution request, and outputs purchase response information derived from the received purchase response.

Abstract: Embodiments of the invention are directed to methods, systems, and devices for replacing a token on a user device, such as a transaction card. The transaction card includes tokens representing an actual account identifier which is not visible on the transaction card. The transaction card may store a first token on a and include a digital display that displays a second token. When the first token or the second token is compromised, the compromised token is replaced without replacing the transaction card. When the second token is compromised, the compromised token is replaced with a new replacement second token using an electronic device. The replacement second token replaces the old second token on the digital display. After the second token is compromised and before the replacement second token is provisioned on the transaction card, the transaction card may still be used for transactions using other tokens provisioned on the card.

Abstract: Various examples are directed to systems and methods for processing offline payments from a mobile wallet. A computing system may receive, from a financial institution system, an authentication request message comprising a first offline token. The computing system may determine that the mobile wallet application is not online and determine that the first offline toke comprises first offline token data that matches the first offline token reference data. The computing system may send to the financial institution system a first authentication message indicating that the first offline token is associated with the mobile wallet application.

Abstract: Systems, computer program products, and methods are described herein for implementing centralized resource distribution framework. The present invention is configured to electronically receive, from a computing device associated with a client, an indication to initiate a resource transfer to a user; retrieve, from a resource repository, one or more resource transfer parameters associated with the user based on at least the information associated with the user; and execute the resource transfer to the user based on at least the one or more resource transfer parameters, wherein executing further comprises transferring the resource from a source repository to the one or more target repositories via the one or more resource routing channels.

Abstract: Systems and methods are described for provisioning access credentials to a mobile device using device and authorization codes. Once provisioned, a mobile device can be used to conduct a transaction.

Abstract: A user terminal generates a first key pair and a second key pair, transmits a permission request including a public encryption key of the second key pair after electronically signing the permission request with a secret encryption key, and acquires, from permission information transmitted from a right-holder terminal, a content decryption key by using a secret decryption key of the second key pair and uses the content. The right-holder terminal stores a third key pair and the content decryption key, verifies the permission request received, and encrypts the content decryption key by using the public encryption key of the second key pair included in the permission request and transmits the permission information including the encrypted content decryption key after electronically signing the permission information with a secret encryption key of the third key pair. The permission request and the permission information are transmitted and received via a blockchain.

Abstract: A card, such as a payment card, can enable provisioning of services. The card includes hardware and software that enable the card to connect to a local device that includes a display. Further, the card can comprise hardware and software that allow the card to connect to a remote server, in one instance by way of a dedicated communication channel. The card can also include a processor and memory that stores instructions that when executed by the processor provide services, such as bank services. The display is provided with graphical elements by the service for rendering including data from a bank or other remote server. A device or interactive display can enable user interaction with services.

Abstract: A method including receiving a first application user credential associated with a user profile; comparing, for a first match, the first application user credential with a stored second application user credential, wherein the stored second application user credential is associated with a user identity; and responsive to finding a first match, verifying the user identity by performing the following: communicating with a card using near field communication; receiving a public key of a key pair of the card and cardholder identification information of an account holder of the card; instructing the card to generate a digital signature; receiving the digital signature from the card; verifying the digital signature using the public key; and comparing, for a second match, at least a portion of the user identity with at least a portion of the cardholder identification information.

Abstract: A method for paying in a motor vehicle having a transaction device involves providing transaction data relating to the payment to the payment transmitter. The transaction data including a receiver address of a payment receiver, a payment amount, a transmitter address of a payment transmitter located in the motor vehicle, and a private key belonging to the transmitter address. The provided transaction data is entered into the transaction device. The entered receiver address is transmitted to the payment receiver, which authenticates the transmitted receiver address. Only if the authenticated receiver address is classified as authentic does the method proceed. This involves signaling the successful authentication of the receiver address to the payment transmitter and transmitting the entered transaction data entered to the cryptocurrency computer network for carrying out the payment.

Abstract: The present disclosure discloses a method for monitoring distributed energy storage safety and an Internet of Things system. The method includes utilizing a data acquiring unit to monitor operating data on a liquefied natural gas (LNG) storage device and transmitting the operating data to an LNG distributed energy management platform; the management platform determining abnormal data in the perception information according to an anomaly judgment condition and performing a pseudo data verification and labeling on the abnormal perception information; performing an anomaly prediction analysis according to an early warning mechanism; sending an alarm prompt to field maintenance personnel according to the abnormal data; and the field maintenance personnel performing a two-way confirmation with the management platform after processing.

Abstract: An approval request is transmitted for a cryptoasset transaction in accordance with a policy stored in a hardware security module (“HSM”). The policy specifies at least one specific approver required for approval of the cryptoasset transaction. The approval request is transmitted to a computer device associated with the specific approver and is configured to cause the computer device to prompt the specific approver to approve the cryptoasset transaction. A security key is received from a hardware security token associated with the specific approver. The security key indicates an approval of the cryptoasset transaction. A risk analysis module authenticates an identity of the specific approver based on the security key. Responsive to the authenticating of the identity of the specific approver, the HSM signs the cryptoasset transaction using a cryptographic key stored in the HSM.