PASS: A Provenanced Access Subaccount System for Blockchain Wallets
PASS is a provenanced access subaccount system that enables secure, privacy-preserving shared control for blockchain wallets by using a verifiable lineage mechanism to ensure assets can only be accessed by authorized subaccounts.
Original paper licensed under CC BY 4.0 (http://creativecommons.org/licenses/by/4.0/). This is an AI-generated explanation of the paper below. It is not written or endorsed by the authors. For technical accuracy, refer to the original paper. Read full disclaimer
Imagine you have a high-tech, magical safe. Usually, in the world of crypto, a "safe" (a wallet) is simple: whoever has the physical key can open it, take everything, and everyone watching can see exactly what you took and where you sent it.
But what if you are a big company? Or what if you want to give an AI robot a little bit of money to buy coffee, but you don't want it to have the power to drain your entire life savings? And what if you want to pay your employees their salaries without the whole world seeing exactly how much everyone makes?
That is the problem this paper, PASS, solves.
The Problem: The "Glass Safe" Dilemma
Current crypto wallets are like glass safes.
- All or Nothing: If you give someone the key, they own everything inside. There’s no "middle ground."
- No Privacy: Every time you move money from one pocket to another inside the safe, the whole world sees it through the glass.
The Solution: The "Magic Ledger" Safe (PASS)
PASS turns that glass safe into a solid, opaque, high-tech vault with a very smart internal manager living inside it.
Here is how it works using three simple metaphors:
1. The Inbox and the Outbox (The Gatekeepers)
Instead of just throwing money into a pile, PASS uses two specialized slots:
- The Inbox: Think of this like a mail slot. When someone sends you money, it drops into the Inbox. It’s sitting there, but it hasn't been "assigned" to anyone yet.
- The Outbox: Think of this like a vending machine slot. When you want to spend money, you don't just grab it; you tell the internal manager, "I want to send $10 to Bob." The manager checks if you have the money, signs the permission, and pushes it out through the Outbox.
2. Provenance: The "Family Tree" of Money
This is the "secret sauce." In a normal wallet, money is just a number. In PASS, every single dollar has a digital birth certificate (called Provenance).
Imagine every dollar bill has a tiny, invisible history written on it: "Born from Deposit A Given to Employee B Moved to Department C."
Because the manager inside the vault keeps track of this "family tree," you can give an AI agent a "sub-account." You aren't giving it a key to the safe; you are giving it a specific "branch" of the family tree. The AI can only spend the money that is part of its specific branch. It can't touch the "trunk" of the tree where your main savings are.
3. The TEE: The "Invisible Manager"
How do we make sure the manager is honest and that no one can peek inside the vault? The paper uses something called a TEE (Trusted Execution Environment).
Think of the TEE as a tiny, indestructible, invisible office built inside the safe. The "manager" lives in this office. Even if a hacker breaks into the safe, they can't see into the office, they can't steal the manager's notebook (the ledger), and they can't change the rules. The manager does all the math and signing in total darkness, so no one can spy on your internal transfers.
Why does this matter in real life?
- For Companies (Private Payroll): A company can send $1 million to its "Main Vault." Inside, the manager privately distributes $5,000 to 200 employees. On the blockchain, the world only sees: "Company sent $1 million to Vault." The individual salaries remain a secret.
- For AI Agents (Safe Delegation): You can give an AI agent a "sub-account" with only $50. Even if the AI gets hacked or goes rogue, it can only "spend" the money that has that specific $50 "birth certificate." Your main funds are untouchable.
- For Speed (The Internal Highway): Moving money between sub-accounts inside the vault is instant and free because it’s just the manager updating a notebook. You only pay blockchain fees when you use the "Outbox" to send money to the outside world.
Summary
PASS takes the "all-or-nothing" risk of crypto wallets and turns it into a sophisticated, private, and highly organized system. It uses provenance (tracking the history of every cent) and TEEs (a secure, invisible manager) to allow people to share access to money without ever losing control or sacrificing privacy.
Drowning in papers in your field?
Get daily digests of the most novel papers matching your research keywords — with technical summaries, in your language.