US 12,388,633 B2
Techniques for single round multi-party computation for digital signatures
Dan Yadlin, Tel-Aviv (IN); Ben Riva, Givatayim (IN); Alon Navon, Tel-Aviv (IN); Lev Pachmanov, Haifa (IL); and Jonathan Katz, Silver Spring, MD (US)
Assigned to PAYPAL, INC., San Jose, CA (US)
Filed by PayPal, Inc., San Jose, CA (US)
Filed on Feb. 28, 2024, as Appl. No. 18/590,920.
Application 18/590,920 is a continuation of application No. 18/177,700, filed on Mar. 2, 2023, granted, now 11,943,346.
Application 18/177,700 is a continuation of application No. 17/019,807, filed on Sep. 14, 2020, granted, now 11,632,244, issued on Apr. 18, 2023.
Prior Publication US 2025/0080341 A1, Mar. 6, 2025
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/08 (2006.01); H04L 9/32 (2006.01)
CPC H04L 9/0861 (2013.01) [H04L 9/0825 (2013.01); H04L 9/085 (2013.01); H04L 9/3247 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method, comprising:
accessing data by a first device, wherein the data is accessed via an intermediary data transfer mechanism, wherein the intermediary data transfer mechanism comprises a hard drive, a memory card, a quick response (QR) code, a modem, a one-way link, a printed paper and a camera, or a scanner, and wherein the first device is offline with respect to at least a second device;
accessing, by the first device, a first secret share generated based on a first secret key;
sending, by the first device to the second device via the intermediary data transfer mechanism, at least one of: a commitment on a value that is calculated based on the first secret key or a non-interactive zero-knowledge proof of knowledge of the first secret key;
after the sending, partially signing the data, by the first device, using the first secret share; and
providing the second device access to the partially signed data at a time the first device is offline with respect to the second device;
wherein the partially signed data enables the second device to generate further signed data that corresponds to a public key generated based on a plurality of secret shares including the first secret share and a second secret share.