Invention Grant
- Patent Title: Computer-implemented system and method for trustless zero-knowledge contingent payment
-
Application No.: US17040482Application Date: 2019-03-18
-
Publication No.: US12014364B2Publication Date: 2024-06-18
- Inventor: Thomas Trevethan
- Applicant: nChain Licensing AG
- Applicant Address: CH Zug
- Assignee: nChain Licensing AG
- Current Assignee: nChain Licensing AG
- Current Assignee Address: CH Zug
- Agency: Davis Wright Tremaine LLP
- Priority: GB 04739 2018.03.23 GB 04740 2018.03.23 GB 04742 2018.03.23
- International Application: PCT/IB2019/052185 2019.03.18
- International Announcement: WO2019/180589A 2019.09.26
- Date entered country: 2020-09-22
- Main IPC: G06Q20/38
- IPC: G06Q20/38 ; G06F16/23 ; G06F16/2458 ; G06Q20/06 ; G06Q20/12 ; G06Q20/40 ; G06Q30/018 ; G06Q30/0207 ; G06Q40/04 ; H04L9/00 ; H04L9/06 ; H04L9/08 ; H04L9/30 ; H04L9/32 ; G06F7/72

Abstract:
The invention relates to efficient zero knowledge verification of composite statements that involve both arithmetic circuit satisfiability and dependent statements about the validity of public keys (key-statement proofs) simultaneously. The method enables a prover to prove this particular statement in zero-knowledge. More specifically, the invention relates to a computer-implemented method for enabling zero-knowledge proof or verification of a statement (S) in which a prover proves to a verifier that a statement is true while keeping a witness (W) to the statement a secret. The invention also relates to the reciprocal method employed by a verifier who verifies the proof. The method includes the prover sending to the verifier a statement (S) having an arithmetic circuit with m gates and n wires configured to implement a function circuit and determine whether for a given function circuit output (h) and an elliptic curve point (P), the function circuit input (s) to a wire of the function circuit is equal to the corresponding elliptic curve point multiplier (s). The prover also sends individual wire commitments and/or a batched commitment for wires of the circuit, an input for a wire in the arithmetic circuit; and a function circuit output (h). The prover receives from the verifier a challenge value (x) and responding with an opening or additionally sends a proving key (PrK) to the verifier. The statement and the data enables the verifier to determine that the circuit is satisfied and calculate the elliptic curve point (P) and validate the statement, thus determining that the prover holds the witness (W) to the statement.
Public/Granted literature
- US20210027294A1 COMPUTER-IMPLEMENTED SYSTEM AND METHOD FOR TRUSTLESS ZERO-KNOWLEDGE CONTINGENT PAYMENT Public/Granted day:2021-01-28
Information query