H2K Wiki
Knowledge base
H2K service is a crypto custodial wallet that utilizes a multi-sig mechanism to ensure the security and authorization of transactions.
H2K includes a unique technology with a well-thought-out security system that corresponds to AES.
Our team has successfully developed both a web version and a mobile application of the H2K service, providing clients with the flexibility to utilize these tools based on their level of experience in blockchain technologies.
| The mobile application H2K Pro | The web version H2K Lite |
| Encompasses the full functionality of the service and is tailored for more experienced clients who have prior familiarity with multi-signature and custodial wallets. | Offers a simple and intuitive interface, catering to users who seek convenient management of their multi-signature wallets. |
Service Components:
- Electronic document flow for conducting and processing payments.
- A fully functioning backend that includes the software complex «Black Box + Safina API.»
Black Box - is the core of the information system for managing crypto-assets. It consists of subsystems for encryption and key storage, defining rules for working with secret keys, and interacting with the blockchain.
Safina API - is an application server that facilitates the interaction of Black Box with external networks.
The solution significantly expands the capabilities of smart contracts, providing access to real-world data and autonomous computations while maintaining the security and reliability guarantees inherent to blockchain technology.
Service clients have the ability to verify the funds in their wallets without the need for obligatory interaction with us. We do not have access to clients' funds. Only wallet owners and authorized wallet signatories have control over their assets.
Functionality of H2K
| Functionality of H2K | ||
|---|---|---|
| Supported Blockchains and Tokens: H2K provides full coverage of the Bitcoin (BTC) blockchain, Polygon and supports the TRON and ETH blockchains, including tokens such as TRX, ETH, MATIC and USDT (TRC-20, ERC-20). In the near future, we plan to add support for other tokens. | Convenience: We offer wallet import functionality, the creation of multi-signature wallets (up to 9 signatories), and the ability to create multiple wallets for a single user. | Multi-signature Wallets:We offer a unique offline method for creating, signing, and verifying transactions. |
Signature verification and collection
In H2K, the wallet's private key is stored centrally in a Black Box instead of being distributed among the wallet signatories and owner in separate parts. To conduct a transaction, all participants of the wallet provide electronic signatures generated by H2K, which identify them. Then, based on the verification of these signatures, the server automatically signs the transaction with the private key.
To create a transaction, wallet participants must provide their signature. In our case, the signature can be of two types:
- A generated BB digital code is sent to the participant's email or phone.
- A generated BB key pair using the elliptic curve method, with the public key shared with the participant.
The signing sequence is as follows: first, wallet co-signers provide their signatures. Once the minimum number of signatures is reached, the owner of the wallet's signature is also checked. Next, a manager from the H2K document management system adds their signature. It's important to note that all signatures from participants in the signing process have the same status. If any of the signatures are missing (or the minimum number of co-signer signatures is not obtained), the transaction will not be sent to the network.
Security
The main security principle is the complete isolation of processes involving wallet creation, wallet key generation, and signature verification from external threats.
The key system and security revolve around the secure isolated data storage of Black Box. It is located in the DMZ (Demilitarized Zone) and operates according to the established rules set during its creation. This server is responsible for creating wallets, storing their private keys, signing transactions with them, and sending them to the blockchain.
The H2K server in the DMZ has tightly restricted access privileges, preventing employees from stealing private wallet keys. Electronic signatures from wallet participants are generated by the Safina application server and then transmitted to Black Box for inclusion in wallet parameters.