More Like this

1. Deterministic Sub-Wallet for Cryptocurrencies

   https://doi.org/10.1109/Blockchain.2019.00064  

   Rezaeighaleh, Hossein; Zou, Cliff C. (July 2019, 2019 IEEE International Conference on Blockchain (Blockchain))

   A big challenge in cryptocurrency is securing a user key from potential hackers because nobody can rollback a transaction made by an attacker with a stolen key once the blockchain network confirms it. One solution to protect users is splitting the money between super-wallet and sub-wallet. The user stores a large amount of money on her super-wallet and keeps it safe; she refills the sub-wallet when she needs while using the sub-wallet for her daily purchases. In this paper, we propose a new scheme to create sub-wallet that we call deterministic sub-wallet. In this scheme, the seed of the sub-wallet keys is derived from the super-wallet master seed, and therefore the super-wallet can build many sub-wallet addresses and refill them in a single blockchain transaction. Compared to existing approaches, our mechanism is cheaper, real-time, more secure against man-in-the-middle attack and easier for backup and recovery. We implement a proof-of-concept on a hardware wallet and evaluate its performance. In addition, we analyze the attacks and defenses of this design to demonstrate that our proposed method has a higher level of security than existing models. 

   more » « less
2. Deterministic Sub-Wallet for Cryptocurrencies

   Rezaeighaleh, Hossein; Zou, Cliff (July 2019, IEEE International Conference on Blockchain)

   A big challenge in cryptocurrency is securing the user’s keys from potential hackers because if the blockchain network confirms a transaction, nobody can rollback that. One solution to protect users is splitting the money between superwallet and sub-wallet. The user stores a large amount of money on the super-wallet and refills the sub-wallet when she needs while she uses the sub-wallet for her daily purchases. In this paper, we propose a new mechanism to create sub-wallet that we call deterministic sub-wallet. In this mechanism, the seed of sub-wallet keys is derived from super-wallet seed, and therefore super-wallet can build many sub-wallet addresses and refill them in a single blockchain transaction. Compared to existing approaches, our mechanism is less expensive, real-time, more secure against MITM attack and easier for backup and recovery. We implement a proof-of-concept on a hardware wallet and evaluate its performance. Also, we analyze the attacks and defenses in our mechanism to demonstrate that our proposed method has a higher level of security than the classic super-wallet sub-wallet model. 

   more » « less
3. Multilayered Defense-in-Depth Architecture for Cryptocurrency Wallet

   https://doi.org/10.1109/ICCC51575.2020.9345013  

   Rezaeighaleh, Hossein; Zou, Cliff C. (December 2020, 2020 IEEE 6th International Conference on Computer and Communications (ICCC))

   null (Ed.)

   A significant challenge in blockchain and cryptocurrencies is protecting private keys from potential hackers because nobody can rollback a transaction made with a stolen key once the blockchain network confirms the transaction. The technical solution to protect private keys is cryptocurrency wallets, a piece of software, hardware, or a combination of them to manage the keys. In this paper, we propose a multilayered architecture for cryptocurrency wallets based on a Defense-in-Depth strategy to protect private keys with a balance between convenience and security. The user protects the private keys in three restricted layers with different protection mechanisms. So, a single breach cannot threaten the entire fund, and it saves time for the user to respond. We implement a proof-of-concept of our proposed architecture on both a smart card hardware wallet and an Android smartphone wallet with no performance penalty. Furthermore, we analyze the security of our proposed architecture with two adversary models. 

   more » « less
4. Security Threats from Bitcoin Wallet Smartphone Applications: Vulnerabilities, Attacks, and Countermeasures

   https://doi.org/10.1145/3422337.3447832  

   Hu, Yiwen; Wang, Sihan; Tu, Guan-Hua; Xiao, Li; Xie, Tian; Lei, Xinyu; Li, Chi-Yu (April 2021, CODASPY '21: Proceedings of the Eleventh ACM Conference on Data and Application Security and Privacy)
5. Towards Understanding the Adoption and Social Experience of Digital Wallet Systems

   https://doi.org/10125/59946  

   Tang, Shiliang; Wu, Ziming; Zhang, Xinyi; Wang, Gang; Ma, Xiaojuan; Zheng, Haitao; Zhao, Ben Y. (January 2019, Hawaii International Conference on System Sciences (HICSS'19))