The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Sep. 15, 2026

Filed:

Mar. 13, 2024
Applicant:

Nchain Licensing Ag, Zug, CH;

Inventor:

Thomas Trevethan, London, GB;

Assignee:
Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
G06Q 20/38 (2012.01); G06F 16/23 (2019.01); G06F 16/2458 (2019.01); G06Q 20/06 (2012.01); G06Q 20/12 (2012.01); G06Q 20/40 (2012.01); G06Q 30/018 (2023.01); G06Q 30/0207 (2023.01); G06Q 40/04 (2012.01); H04L 9/00 (2022.01); H04L 9/06 (2006.01); H04L 9/08 (2006.01); H04L 9/30 (2006.01); H04L 9/32 (2006.01); G06F 7/72 (2006.01);
U.S. Cl.
CPC ...
G06Q 20/3829 (2013.01); G06F 16/2365 (2019.01); G06F 16/2379 (2019.01); G06F 16/2465 (2019.01); G06Q 20/0655 (2013.01); G06Q 20/1235 (2013.01); G06Q 20/38215 (2013.01); G06Q 20/3825 (2013.01); G06Q 20/3827 (2013.01); G06Q 20/389 (2013.01); G06Q 20/401 (2013.01); G06Q 30/0185 (2013.01); G06Q 30/0215 (2013.01); G06Q 40/04 (2013.01); H04L 9/008 (2013.01); H04L 9/0637 (2013.01); H04L 9/0819 (2013.01); H04L 9/0869 (2013.01); H04L 9/3066 (2013.01); H04L 9/3073 (2013.01); H04L 9/3221 (2013.01); G06F 7/725 (2013.01); G06F 2216/03 (2013.01); G06Q 2220/00 (2013.01); H04L 9/50 (2022.05);
Abstract

This invention relates to a computer-implemented method for enabling zero-knowledge proof or verification of a statement (S) in which a prover proves to a verifier that a statement is true while keeping a witness (W) to the statement a secret. The method includes sending to the verifier a statement (S) represented by an arithmetic circuit configured to implement a function circuit and determine whether a function circuit output (h) and an elliptic curve point (P), the function circuit input (s) to a wire of the function circuit is equal to the corresponding elliptic curve point multiplier (s); individual wire commitments and a batched commitment for wires of the circuit; a function circuit output (h); proving key (PrK) to enable the verifier to determine that the circuit is satisfied and calculate the elliptic curve point (P) to validate the statement, determin that the prover holds the witness (w) to the statement.


Find Patent Forward Citations

Loading…