{"id":289,"date":"2020-08-09T21:45:50","date_gmt":"2020-08-09T21:45:50","guid":{"rendered":"http:\/\/tonysbit.blog\/?p=289"},"modified":"2020-08-09T21:45:50","modified_gmt":"2020-08-09T21:45:50","slug":"cauth2-0-a-open-security-framework-for-smart-cryptographic-wallets","status":"publish","type":"post","link":"https:\/\/tonysbit.blog\/?p=289","title":{"rendered":"CAUTH2.0: A Open Security Framework for Smart Cryptographic Wallets"},"content":{"rendered":"\n<p><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Introduction<\/h2>\n\n\n\n<p>Although Bitcoin, Ethereum and the general concept of Cryptocurrency is much more widespread then when I got into it, I am still surprised to find how difficult it is for my friends and family to get started. Whether they have to create paper wallets via <a rel=\"noreferrer noopener\" href=\"https:\/\/www.myetherwallet.com\/\" target=\"_blank\">myetherwallet.com<\/a> and having to save their seed to a password manager (or for the less tech savy to a text file on their desktop) or trying to use Ledger the experience feels alien compared to pretty much every other software ecosystem.<\/p>\n\n\n\n<p>CAuth2.0 is my proposal to solve this issue. The original goal was to create a user experience as close to what users commonly experience (email, password, 2FA) but with the same &#8220;level&#8221; of security as hardware wallets. At a high level the solution utilizes client-side encryption similar to secure password managers but combined with 2FA multi-signature workflows to ensure network security.<\/p>\n\n\n\n<p>You can read the full framework <a href=\"https:\/\/www.academia.edu\/43816657\/CAUTH2_0_A_Open_Security_Framework_for_Smart_Cryptographic_Wallets\">here<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Key access: How does it work?<\/h2>\n\n\n\n<p>The framework proposes a client encrypted key storage system that ensures that the service-provider never has access to private keys. This methodology results in users having access to their keys using a Email + Password + Master Password. Admittedly the master password is an additional piece of information users must store however it has a added advantage of being disposable and customizable which is not the same as a seed or private key.<\/p>\n\n\n\n<p>Vault Creation and Key Storage Process <\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"640\" height=\"953\" src=\"https:\/\/i0.wp.com\/vfy.mne.mybluehost.me\/tonysbit\/wp-content\/uploads\/2020\/08\/cauth2.0-vault-creation-flow.png?resize=640%2C953\" alt=\"\" class=\"wp-image-292\" srcset=\"https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2020\/08\/cauth2.0-vault-creation-flow.png?w=657&amp;ssl=1 657w, https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2020\/08\/cauth2.0-vault-creation-flow.png?resize=202%2C300&amp;ssl=1 202w\" sizes=\"(max-width: 640px) 100vw, 640px\" data-recalc-dims=\"1\" \/><\/figure><\/div>\n\n\n\n<p>Key Retrieval Process<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"640\" height=\"884\" src=\"https:\/\/i0.wp.com\/vfy.mne.mybluehost.me\/tonysbit\/wp-content\/uploads\/2020\/08\/decryption-flow-1.png?resize=640%2C884\" alt=\"\" class=\"wp-image-295\" srcset=\"https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2020\/08\/decryption-flow-1.png?w=708&amp;ssl=1 708w, https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2020\/08\/decryption-flow-1.png?resize=217%2C300&amp;ssl=1 217w\" sizes=\"(max-width: 640px) 100vw, 640px\" data-recalc-dims=\"1\" \/><\/figure><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Two-factor Multi-signature: How does it work?<\/h2>\n\n\n\n<p>By using smart-account functionality and a intermediary security layer, users are able to provide authorization for transactions via a second methodology i.e. Email or SMS.<\/p>\n\n\n\n<p>Transaction Broadcasting Communication Flow<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"591\" height=\"581\" src=\"https:\/\/i0.wp.com\/vfy.mne.mybluehost.me\/tonysbit\/wp-content\/uploads\/2020\/08\/cauth2.0-signing.png?resize=591%2C581\" alt=\"\" class=\"wp-image-298\" srcset=\"https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2020\/08\/cauth2.0-signing.png?w=591&amp;ssl=1 591w, https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2020\/08\/cauth2.0-signing.png?resize=300%2C295&amp;ssl=1 300w\" sizes=\"(max-width: 591px) 100vw, 591px\" data-recalc-dims=\"1\" \/><\/figure><\/div>\n\n\n\n<p>Sample Deployment Architecture<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"485\" height=\"417\" src=\"https:\/\/i0.wp.com\/vfy.mne.mybluehost.me\/tonysbit\/wp-content\/uploads\/2020\/08\/cauth2.0-sample-architecture.png?resize=485%2C417\" alt=\"\" class=\"wp-image-297\" srcset=\"https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2020\/08\/cauth2.0-sample-architecture.png?w=485&amp;ssl=1 485w, https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2020\/08\/cauth2.0-sample-architecture.png?resize=300%2C258&amp;ssl=1 300w\" sizes=\"(max-width: 485px) 100vw, 485px\" data-recalc-dims=\"1\" \/><\/figure><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Conclusion<\/h2>\n\n\n\n<p>By addressing these challenges, users of CAuth2.0 can have a familiar experience for primary authentication\/authorization (OAuth2.0) and transaction broadcasting (two-factor confirmations). The proposed framework is compatible with all Smart Account enabled blockchains and can be implemented in a multi-service provider ecosystem.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Combining both an industry accepted authentication\/authorization framework in conjunction with blockchain based on-chain security innovations, CAuth2.0 allows users to retain full ownership of keys whilst protecting their funds from unauthorized transactions.<\/p>\n","protected":false},"author":1,"featured_media":301,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"nf_dc_page":"","jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[4,12,13],"tags":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2020\/08\/cauth2.0-sample-architecture-1.png?fit=485%2C417&ssl=1","_links":{"self":[{"href":"https:\/\/tonysbit.blog\/index.php?rest_route=\/wp\/v2\/posts\/289"}],"collection":[{"href":"https:\/\/tonysbit.blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tonysbit.blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tonysbit.blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tonysbit.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=289"}],"version-history":[{"count":0,"href":"https:\/\/tonysbit.blog\/index.php?rest_route=\/wp\/v2\/posts\/289\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tonysbit.blog\/index.php?rest_route=\/wp\/v2\/media\/301"}],"wp:attachment":[{"href":"https:\/\/tonysbit.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=289"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tonysbit.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=289"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tonysbit.blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=289"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}