Pre-signed transaction requests for cryptographic key management

Abstract

The present disclosure relates to systems, methods, and non-transitory computer-readable media that utilize pre-signed key rotation transaction requests for initiating transactions to rotate one or more cryptographic keys of a user account of a distributed digital ledger transaction network. For example, in one or more embodiments, the disclosed systems initiate a transaction to delegate a permission for rotating one or more cryptographic keys of a first user account to a second user account. Using the second user account, the disclosed systems generate and store a pre-signed key rotation transaction request. By retrieving the pre-signed key rotation transaction request from storage, the disclosed systems can initiate a key rotation transaction that exchanges the active cryptographic key of the first user account to a modified cryptographic key.

What is claimed is: 
     
         1 . A computer-implemented method comprising:
 executing, at a node device managing a digital ledger of a distributed digital ledger transaction network, a transaction delegating a permission to rotate one or more cryptographic keys of a first user account of the distributed digital ledger transaction network to a second user account of the distributed digital ledger transaction network;   receiving, at the node device, a pre-signed key rotation transaction request, the pre-signed key rotation transaction request comprising a cryptographic key of the second user account; and   in response to receiving the pre-signed key rotation transaction request, executing, at the node device, a pre-signed key rotation transaction to exchange an active cryptographic key for the first user account to a modified cryptographic key for the first user account.   
     
     
         2 . The computer-implemented method of  claim 1 , further comprising committing, to the digital ledger, the transaction delegating the permission to rotate the one or more cryptographic keys of the first user account to the second user account upon determining consensus of the transaction across a plurality of node devices. 
     
     
         3 . The computer-implemented method of  claim 2 , wherein committing the transaction comprises modifying a node of an authenticated tree structure of the digital ledger. 
     
     
         4 . The computer-implemented method of  claim 1 , further comprising executing, at the node device of the distributed digital ledger transaction network, an additional transaction delegating a permission to freeze the first user account to an additional user account. 
     
     
         5 . The computer-implemented method of  claim 4 , further comprising in response to receiving, at the node device, a freeze transaction request comprising a cryptographic key of the second user account, executing, at the node device, a freeze transaction to prevent transfer of digital assets corresponding to the first user account. 
     
     
         6 . The computer-implemented method of  claim 5 , wherein preventing the transfer of digital assets corresponding to the first user account comprises preventing execution of an additional transaction delegating one or more permissions related to the first user account. 
     
     
         7 . The computer-implemented method of  claim 4 , further comprising in response to executing the pre-signed key rotation transaction on the digital ledger to exchange the active cryptographic key for the first user account to the modified cryptographic key for the first user account, executing an unfreeze transaction unfreezing the first user account. 
     
     
         8 . The computer-implemented method of  claim 1 , further comprising executing, at the node device of the distributed digital ledger transaction network, an additional transaction delegating a permission to rotate one or more cryptographic keys of a third user account of the distributed digital ledger transaction network to the second user account of the distributed digital ledger transaction network. 
     
     
         9 . The computer-implemented method of  claim 1 , further comprising executing a subsequent transaction utilizing the modified cryptographic key for the first user account. 
     
     
         10 . A non-transitory computer-readable medium storing instructions thereon that, when executed by at least one processor, cause a computing device to:
 execute, at a node device managing a digital ledger of a distributed digital ledger transaction network, a transaction delegating a permission to rotate one or more cryptographic keys of a first user account of the distributed digital ledger transaction network to a second user account of the distributed digital ledger transaction network;   receive, at the node device, a pre-signed key rotation transaction request, the pre-signed key rotation transaction request comprising a cryptographic key of the second user account; and   in response to receiving the pre-signed key rotation transaction request, execute, at the node device, a pre-signed key rotation transaction to exchange an active cryptographic key for the first user account to a modified cryptographic key for the first user account.   
     
     
         11 . The non-transitory computer-readable medium of  claim 10 , further comprising instructions that, when executed by the at least one processor, cause the computing device to commit, to the digital ledger, the transaction delegating the permission to rotate the one or more cryptographic keys of the first user account to the second user account upon determining consensus of the transaction across a plurality of node devices. 
     
     
         12 . The non-transitory computer-readable medium of  claim 11 , further comprising instructions that, when executed by the at least one processor, cause the computing device to commit the transaction by modifying a node of an authenticated tree structure of the digital ledger. 
     
     
         13 . The non-transitory computer-readable medium of  claim 10 , further comprising instructions that, when executed by the at least one processor, cause the computing device to execute, at the node device of the distributed digital ledger transaction network, an additional transaction delegating a permission to freeze the first user account to an additional user account. 
     
     
         14 . The non-transitory computer-readable medium of  claim 13 , further comprising instructions that, when executed by the at least one processor, cause the computing device to, in response to receiving a freeze transaction request comprising a cryptographic key of the second user account, executing a freeze transaction to prevent transfer of digital assets corresponding to the first user account. 
     
     
         15 . The non-transitory computer-readable medium of  claim 14 , further comprising instructions that, when executed by the at least one processor, cause the computing device to prevent the transfer of digital assets corresponding to the first user account comprises preventing execution of an additional transaction delegating one or more permissions related to the first user account. 
     
     
         16 . The non-transitory computer-readable medium of  claim 10 , further comprising instructions that, when executed by the at least one processor, cause the computing device to execute a subsequent transaction utilizing the modified cryptographic key for the first user account. 
     
     
         17 . A system comprising:
 at least one processor; and   a non-transitory computer-readable medium comprising instructions that, when executed by the at least one processor, cause the system to:   execute, at a node device managing a digital ledger of a distributed digital ledger transaction network, a transaction delegating a permission to rotate one or more cryptographic keys of a first user account of the distributed digital ledger transaction network to a second user account of the distributed digital ledger transaction network;   receive, at the node device, a pre-signed key rotation transaction request, the pre-signed key rotation transaction request comprising a cryptographic key of the second user account; and   in response to receiving the pre-signed key rotation transaction request, execute, at the node device, a pre-signed key rotation transaction to exchange an active cryptographic key for the first user account to a modified cryptographic key for the first user account.   
     
     
         18 . The system of  claim 17 , further comprising instructions that, when executed by the at least one processor, cause the system to commit, to the digital ledger, the transaction delegating the permission to rotate the one or more cryptographic keys of the first user account to the second user account upon determining consensus of the transaction across a plurality of node devices. 
     
     
         19 . The system of  claim 17 , further comprising instructions that, when executed by the at least one processor, cause the system to:
 execute, at the node device of the distributed digital ledger transaction network, an additional transaction delegating a permission to freeze the first user account to an additional user account; and   in response to receiving a freeze transaction request comprising a cryptographic key of the second user account, executing a freeze transaction to prevent transfer of digital assets corresponding to the first user account.   
     
     
         20 . The system of  claim 17 , further comprising instructions that, when executed by the at least one processor, cause the system to execute a subsequent transaction utilizing the modified cryptographic key for the first user account.