Systems and methods to replicate private key shares from multi-party computation (mpc) nodes in a primary subsystem to mpc nodes a backup subsystem

Abstract

A system includes a primary asset custody subsystem in a first cloud computing data center and a backup asset custody subsystem in a second cloud computing data center different from the first cloud computing data center. The primary subsystem includes a plurality of primary multi-party computation (MPC) clusters, where each primary MPC cluster is allocated to an asset owner and includes a primary MPC client and a plurality of primary MPC nodes. The backup subsystem includes a plurality of backup MPC clusters corresponding to the plurality of primary MPC clusters, where each backup MPC cluster is allocated to the asset owner of its corresponding primary MPC cluster and includes a backup MPC client and a plurality of backup MPC nodes. The backup MPC client sends an export public key from each backup MPC node to the primary MPC client, where each export public key is part of a corresponding export public key-export private key pair. The primary MPC client sends each export public key to a corresponding primary MPC node, and in response, receives from each primary MPC node a corresponding encrypted private key share encrypted with a corresponding export public key. The primary MPC client then sends the encrypted private key shares to the backup MPC client, which transmits the encrypted private key shares to corresponding backup MPC nodes. Each backup MPC node decrypts a corresponding encrypted private key share using the export private key from the corresponding export public key-export private key pair to obtain a corresponding backup private key share which can be used if the backup subsystem takes over operation, and to store the decrypted corresponding backup private key share.