The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jul. 22, 2025

Filed:

Nov. 29, 2023
Applicant:

Nchain Licensing Ag, Zug, CH;

Inventor:

Thomas Trevethan, London, GB;

Assignee:
Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
G06Q 20/38 (2012.01); G06F 7/72 (2006.01); G06F 16/23 (2019.01); G06F 16/2458 (2019.01); G06Q 20/06 (2012.01); G06Q 20/12 (2012.01); G06Q 20/40 (2012.01); G06Q 30/018 (2023.01); G06Q 30/0207 (2023.01); G06Q 40/04 (2012.01); H04L 9/00 (2022.01); H04L 9/06 (2006.01); H04L 9/08 (2006.01); H04L 9/30 (2006.01); H04L 9/32 (2006.01);
U.S. Cl.
CPC ...
G06Q 20/3829 (2013.01); G06F 16/2365 (2019.01); G06F 16/2379 (2019.01); G06F 16/2465 (2019.01); G06Q 20/0655 (2013.01); G06Q 20/1235 (2013.01); G06Q 20/38215 (2013.01); G06Q 20/3825 (2013.01); G06Q 20/3827 (2013.01); G06Q 20/389 (2013.01); G06Q 20/401 (2013.01); G06Q 30/0185 (2013.01); G06Q 30/0215 (2013.01); G06Q 40/04 (2013.01); H04L 9/008 (2013.01); H04L 9/0637 (2013.01); H04L 9/0819 (2013.01); H04L 9/0869 (2013.01); H04L 9/3066 (2013.01); H04L 9/3073 (2013.01); H04L 9/3221 (2013.01); G06F 7/725 (2013.01); G06F 2216/03 (2013.01); G06Q 2220/00 (2013.01); H04L 9/50 (2022.05);
Abstract

The invention relates to efficient zero knowledge verification of composite statements that involve both arithmetic circuit satisfiability and dependent statements about the validity of public keys (key-statement proofs) simultaneously. A method is disclosed for a prover proving to a verifier that a statement is true, while keeping a witness (w) to the statement a secret, and a verifier using a reciprocal method to verify the proof. The prover sends, to the verifier, data including a statement represented by an implemented function circuit, individual wire commitments and/or a batched commitment for the function circuit of the statement, a given function circuit output, and a proving key. Based on the sent data, the verifier is able to determine satisfiability of the function circuit, calculate an elliptic curve point, and validate the statement, thus determining that the prover holds the witness to the statement and ensuring the data complies with the statement.


Find Patent Forward Citations

Loading…