AMIS Wallet Service

•

1 like•520 views

https://am.is Access your digital assets with ease and confidence. AMIS Digital Asset Custody Service operates at institutional-grade security levels. Our advanced protocols and cryptographic systems ensure that your assets remain securely under your control.

Engineering

Wallet Service
AMIS WS 如何提供便捷安全的錢包服務
07/15/2020

About AMIS
Fintech Regulatory
Sandbox
Blockchain &
Research
Wallet Service

About Me
AMIS
MaiCoin
HTC
Wyse / Dell
Noodle Labs / TunesAccess
Oracle
Stanford
NCCU

一句話描述 Wallet Service
提供高可用性 API 且安全的數位資產錢包服務
(Secure cloud digital asset wallet service with highly available API)

一張圖描述 Wallet Service
Node Cluster Key Storage
+

一張圖總結 Wallet Service
Reliable
developer API
Professional &
economical
node operation
Wallet security

Case Study: OMNI USDT 假入金security
https://www.coinness.com/news/582082
● 常見手法：駭客利用真的交易，假的內容騙收款者或是交易所收到
款項。
● OMNI 常見手法：使用非 USDT Property ID

Case Study: Geth RPC 誤用security
● Geth：以太坊官方節點，提供節點及錢包功能。
● Geth RPC：Geth 提供給程式操作的接口。

Case Study: Geth RPC 誤用security
● 搭配服用：
1. Geth RPC 沒鎖內網
2. 使用預設連接埠 8545
3. 接受任意來源 IP
4. 使用 unlockAccount，就算只 unlock 1s

Key Generation & Encryption
AMIS Service Service Cluster Storage Cluster
1.new_address 2.gen encryption key
Recursive multi-layered
distributed key
3.distributed key
encryption
4.distributed secure storage
security

Client Protection
App Service AMIS Service
Dual certification
Multi-factor
authentication
IP whitelisting
End 2 end encryption
Key rotation
Policies
security

Case Study: Gas Price 急速飆升Operation
https://ethgasstation.info/

Case Study: Gas Price 急速飆升Operation
AMIS Gas Price Prediction (GPP)
200 Gwei
P95

Case Study: Gas Price 急速飆升Operation
AMIS Transaction Watcher
89
86 ~ 103

Case Study: 雲端服務帳號／資料無預警遺失Operation
● AWS 在 2017年就因為一位開發人員的失誤而造成了大規模的服
務中斷。
● Azure 在2018年則是因為天災而造成硬體裝置損毀。
● GCP 在2019年則是發生了近三年最大規模的當機。

Professional & Economical OperationOperation
Kubernetes
Powered Cluster
Smart Node
Management
Cross Cloud
Backup

Reliable Developer APIAPI
Scalable
Explorer API
Webhooks &
Alerts
Customizable
API

Moving Toward Decentralization - Multisignature
Wikipedia: Multisignature (multi-signature) is a digital signature
scheme which allows a group of users to sign a single document.

Bitcoin Multisig
● 原生 Multi-signature
1. Locking script: M <Public Key 1> <Public Key 2> ... <Public
Key N> N OP_CHECKMULTISIG
2. Unlocking script: OP_0 <Signature 1> <Signature 2> …
<Signature M>
● 或用 P2SH（較常見）
1. Redeem script + Locking script: <2 PK1 PK2 PK3 PK4 PK5 5
OP_CHECKMULTISIG> OP_HASH160 <redeem scriptHash>
OP_EQUAL
2. Unlocking script: <Sig1> <Sig2> 2 PK1 PK2 PK3 PK4 PK5 5
OP_CHECKMULTISIG

Ethereum Multisig
https://github.com/gnosis/MultiSigWallet

Keyless Wallet: Threshold Signature
MPC for signature
generation
Private key never exposed!

Hierarchical Threshold Signature
Regular shares
High level shares

HTSS Use Case: Multisig Mobile Wallet
AMIS Service
Users
MPC for signature
generation
App Service

Companion to http://blog.airtightnetworks.com/impact-iot-enterprise-wi-fi "The Impact of IoT on Enterprise Wi-Fi." via AirTight blog. Choose your wireless network carefully. Cloud and APs are not all created equal. Clearly we’re not in Kansas anymore … According to IDC, the growing global Internet of Things (IoT) market is on course to hit $7.1 trillion by 2020. With the rapid rise of connected devices in the IoT landscape there is growing concern about elevated security risks associated with the sheer volume of new devices coming online.

Citrix

Yansi Keim

A Quick Guide To Mining Bitcoin

BitcoinMining4

CIS 2015-Putting Control Back in the Users’ Hands- David Pollington

CloudIDSummit

With the growing threat and public concern around the use of legacy username/password mechanisms for authentication and authorisation, many are now turning to the mobile phone as a way of providing solutions that are convenient and provide peace of mind for the user as well as meeting the security requirements and expectations of both Service Providers and Government/Regulatory Bodies keen to protect the interests of citizens. We’ll look at the role the mobile phone (and mobile operator) can play in supporting a wide range of different use cases bringing together industry initiatives such as GSMA Mobile Connect and the FIDO Alliance.

Achieving Visibility, Security and Real-Time Actionable Alerts Using VPC Flow...

Amazon Web Services

Visibility is a must for detecting threats and compromises in the cloud, containers, and on-premises networks. In this session, we will explore how Stealthwatch Cloud uses VPC Flow logs and network telemetry combined with advanced analytics such as entity modeling and threat intelligence feeds like Cisco Talos to detect attacks, data exfiltration, unusual remote access, and traffic that is not compliant with your policies.

A Blueprint for Cloud-Native Financial Institutions

Angelo Agatino Nicolosi

IAM automation continues to progress as more and more organizations and vendors focus on making their security services consumable through self-service, APIs, and other low-cost/low-friction service delivery methods. But what is to be done about IAM infrastructure, deployments, and general operations tasks? Without paying for someone else to handle it via IDaaS? In this session Jon Lehtinen details how Thomson Reuters used containers, cloud services, & devops to build & launch a brand new, fully global, auto-scaling, & self-healing enterprise SSO service that is defined, deployed, and iterated entirely through code. This automation of SSO infrastructure & operations greatly reduced the time to deliver the new service, improves the organization’s security posture, & provides a superior authentication experience for users and application teams- all at a fraction of the run rate of comparable turnkey IDaaS solutions. Come and hear their experiences, and see how you too could automate away late-night outage calls.

Copper-Masterdeck.pdf

ZonChu

SmartCard Forum 2011 - Evolution of authentication marketOKsystem

Secure & Automate AWS Deployments with Next-Generation Security from Palo Alt...

Amazon Web Services

Building seamless, consistent security policies across on-premises and cloud IT environments can be challenging without comprehensive workload visibility. Learn how to gain greater control over your applications, automatically create consistent and uniform security policies, and prevent known and unknown threats within application flows. Join us to Learn: How to protect and automate your AWS deployments while maintaining data segregation Best practices for creating consistent security for data moving to and from the cloud How to securely extend your application development testing environment to AWS Speakers: AWS Speaker: David Wright, Solution Architect Palo Alto Networks Speaker: Bisham Kishnani, Senior Consulting Engineer

Gain visibility and real-time security alerts with VPC Flow Logs & AWS - DEM0...

Amazon Web Services

Rapid adoption of cloud services and application migration brings several challenges to network administrators and security professionals, making real-time visibility of the network even more of a priority. In this session, learn how Cisco Stealthwatch Cloud helps you leverage data that you inherently create with AWS within your network to prevent compute theft and orphaned compute, secure weak or incomplete access control lists (ACL), and enforce security policies beyond the traditional firewall while maintaining regulatory compliance by extending visibility across your entire network. This presentation is brought to you by AWS partner, Cisco Systems Inc.

Cloud security ely kahn

Ely Kahn

Gain visibility & real-time actionable security alerts with VPC Flow Logs & A...

Amazon Web Services

The rapid adoption of cloud services and application migration has brought several challenges to network admins and security professionals, and it has made real-time visibility of the network an even more crucial priority. In this session, learn how Cisco Stealthwatch Cloud helps you leverage data you inherently create with AWS and within your network to prevent compute theft and orphaned compute, secure weak or incomplete access control lists (ACL), and enforce security policies beyond the traditional firewall while maintaining regulatory compliance by extending visibility across your entire network. This presentation is brought to you by AWS partner, Cisco Systems, Inc.

IRJET- Graphical Secret Code in Internet Banking for Improved Security Transa...

IRJET Journal

Using Splunk or ELK for Auditing AWS/GCP/Azure Security posture

CloudVillage

Speaker 1: Rod Soto Speaker 2: Jose Hernandez This presentation shows how to use Splunk to provide the analyst with a comprehensive vision of AWS/GCP/Azure security posture. Presenters will outline how to ingest the audit data provided by open source tool Cloud Security Suite into Splunk to analyze cloud vulnerability, harden multi-cloud deployments and visualize multi-cloud threat surface. Presenters will also demonstrate use cases based on Splunk knowledge objects (Tables, Dashboards, Alerts, Field extractions, Lookups, etc), in order to take advantage of the information provided by various supporting tools like Scout2 and G-Scout projects for cloud API auditing.

Using Splunk/ELK for auditing AWS/GCP/Azure security posture

Jose Hernandez

Cloud security and cyber security v 3.1

CloudExpoEurope

Building APIs in a Cloud Native Era

Nuwan Dias

apidays LIVE Paris - Building APIs in a Cloud Native era by Nuwan Dias

apidays

GeeCON Microservices 2015 scaling micro services at gilt

Adrian Trenaman

IBM CLOUD - PRESENTAZIONE

Fondazione CRUI

Guarding the guardian’s guard: IBM Trusteer - SEP326 - AWS re:Inforce 2019

Amazon Web Services

Risk assessment associated with digital identity is at the core of any digital business transformation. Companies strive to provide their customers with the best possible service, but at the same time, they struggle with the challenges of digital identity risk. IBM Trusteer is a SaaS solution that is meeting the challenge head-on. In this talk, we present two stories. We look at some identity proofing techniques, and we also examine some of the tools and processes that are keeping Trusteer’s cloud safe and secure. This session also explores use cases involving IBM tools that are deployed in an AWS environment.

Containers At-Risk A Review of 21,000 Cloud Environments

Lacework

Containers at risk a review of 21,000 cloud environments

dhubbard858

weather web application report.pdf

Pratik Pawar

Pile Foundation by Venkatesh Taduvai (Sub Geotechnical Engineering II)-conver...

AJAYKUMARPUND1

Similar to AMIS Wallet Service

Visibility and Automation for Enhanced Security

patmisasi

AWS Summit Singapore 2019 | Learn How to Achieve Complete Visibility, Strong ...

AWS Summits

BYOIDaaS - Automating IAM Infrastructure & Operations

Jon Lehtinen

Copper-Masterdeck.pdf

ZonChu

SmartCard Forum 2011 - Evolution of authentication marketOKsystem

Secure & Automate AWS Deployments with Next-Generation Security from Palo Alt...

Amazon Web Services

Gain visibility and real-time security alerts with VPC Flow Logs & AWS - DEM0...

Amazon Web Services

Cloud security ely kahn

Ely Kahn

Gain visibility & real-time actionable security alerts with VPC Flow Logs & A...

Amazon Web Services

IRJET- Graphical Secret Code in Internet Banking for Improved Security Transa...

IRJET Journal

Using Splunk or ELK for Auditing AWS/GCP/Azure Security posture

CloudVillage

Using Splunk/ELK for auditing AWS/GCP/Azure security posture

Jose Hernandez

Cloud security and cyber security v 3.1

CloudExpoEurope

Building APIs in a Cloud Native Era

Nuwan Dias

apidays LIVE Paris - Building APIs in a Cloud Native era by Nuwan Dias

apidays

GeeCON Microservices 2015 scaling micro services at gilt

Adrian Trenaman

IBM CLOUD - PRESENTAZIONE

Fondazione CRUI

Guarding the guardian’s guard: IBM Trusteer - SEP326 - AWS re:Inforce 2019

Amazon Web Services

Containers At-Risk A Review of 21,000 Cloud Environments

Lacework

Containers at risk a review of 21,000 cloud environments

dhubbard858

Similar to AMIS Wallet Service (20)

Visibility and Automation for Enhanced Security

AWS Summit Singapore 2019 | Learn How to Achieve Complete Visibility, Strong ...

BYOIDaaS - Automating IAM Infrastructure & Operations

Copper-Masterdeck.pdf

SmartCard Forum 2011 - Evolution of authentication market

Secure & Automate AWS Deployments with Next-Generation Security from Palo Alt...

Gain visibility and real-time security alerts with VPC Flow Logs & AWS - DEM0...

Cloud security ely kahn

Gain visibility & real-time actionable security alerts with VPC Flow Logs & A...

IRJET- Graphical Secret Code in Internet Banking for Improved Security Transa...

Using Splunk or ELK for Auditing AWS/GCP/Azure Security posture

Using Splunk/ELK for auditing AWS/GCP/Azure security posture

Cloud security and cyber security v 3.1

Building APIs in a Cloud Native Era

apidays LIVE Paris - Building APIs in a Cloud Native era by Nuwan Dias

GeeCON Microservices 2015 scaling micro services at gilt

IBM CLOUD - PRESENTAZIONE

Guarding the guardian’s guard: IBM Trusteer - SEP326 - AWS re:Inforce 2019

Containers At-Risk A Review of 21,000 Cloud Environments

Containers at risk a review of 21,000 cloud environments

Recently uploaded

weather web application report.pdf

Pratik Pawar

Pile Foundation by Venkatesh Taduvai (Sub Geotechnical Engineering II)-conver...

AJAYKUMARPUND1

Unbalanced Three Phase Systems and circuits.pptx

ChristineTorrepenida1

Cosmetic shop management system project report.pdf

Kamal Acharya

Buying new cosmetic products is difficult. It can even be scary for those who have sensitive skin and are prone to skin trouble. The information needed to alleviate this problem is on the back of each product, but it's thought to interpret those ingredient lists unless you have a background in chemistry. Instead of buying and hoping for the best, we can use data science to help us predict which products may be good fits for us. It includes various function programs to do the above mentioned tasks. Data file handling has been effectively used in the program. The automated cosmetic shop management system should deal with the automation of general workflow and administration process of the shop. The main processes of the system focus on customer's request where the system is able to search the most appropriate products and deliver it to the customers. It should help the employees to quickly identify the list of cosmetic product that have reached the minimum quantity and also keep a track of expired date for each cosmetic product. It should help the employees to find the rack number in which the product is placed.It is also Faster and more efficient way.

Water billing management system project report.pdf

Kamal Acharya

Our project entitled “Water Billing Management System” aims is to generate Water bill with all the charges and penalty. Manual system that is employed is extremely laborious and quite inadequate. It only makes the process more difficult and hard. The aim of our project is to develop a system that is meant to partially computerize the work performed in the Water Board like generating monthly Water bill, record of consuming unit of water, store record of the customer and previous unpaid record. We used HTML/PHP as front end and MYSQL as back end for developing our project. HTML is primarily a visual design environment. We can create a android application by designing the form and that make up the user interface. Adding android application code to the form and the objects such as buttons and text boxes on them and adding any required support code in additional modular. MySQL is free open source database that facilitates the effective management of the databases by connecting them to the software. It is a stable ,reliable and the powerful solution with the advanced features and advantages which are as follows: Data Security.MySQL is free open source database that facilitates the effective management of the databases by connecting them to the software.

The Role of Electrical and Electronics Engineers in IOT Technology.pdf

Nettur Technical Training Foundation

The Internet of Things (IoT) is a revolutionary concept that connects everyday objects and devices to the internet, enabling them to communicate, collect, and exchange data. Imagine a world where your refrigerator notifies you when you’re running low on groceries, or streetlights adjust their brightness based on traffic patterns – that’s the power of IoT. In essence, IoT transforms ordinary objects into smart, interconnected devices, creating a network of endless possibilities. Here is a blog on the role of electrical and electronics engineers in IOT. Let's dig in!!!! For more such content visit: https://nttftrg.com/

AKS UNIVERSITY Satna Final Year Project By OM Hardaha.pdf

SamSarthak3

CW RADAR, FMCW RADAR, FMCW ALTIMETER, AND THEIR PARAMETERS

veerababupersonal22

It consists of cw radar and fmcw radar ,range measurement,if amplifier and fmcw altimeterThe CW radar operates using continuous wave transmission, while the FMCW radar employs frequency-modulated continuous wave technology. Range measurement is a crucial aspect of radar systems, providing information about the distance to a target. The IF amplifier plays a key role in signal processing, amplifying intermediate frequency signals for further analysis. The FMCW altimeter utilizes frequency-modulated continuous wave technology to accurately measure altitude above a reference point.

Governing Equations for Fundamental Aerodynamics_Anderson2010.pdf

WENKENLI1

Steel & Timber Design according to British Standard

AkolbilaEmmanuel1

Hybrid optimization of pumped hydro system and solar- Engr. Abdul-Azeez.pdf

fxintegritypublishin

Advancements in technology unveil a myriad of electrical and electronic breakthroughs geared towards efficiently harnessing limited resources to meet human energy demands. The optimization of hybrid solar PV panels and pumped hydro energy supply systems plays a pivotal role in utilizing natural resources effectively. This initiative not only benefits humanity but also fosters environmental sustainability. The study investigated the design optimization of these hybrid systems, focusing on understanding solar radiation patterns, identifying geographical influences on solar radiation, formulating a mathematical model for system optimization, and determining the optimal configuration of PV panels and pumped hydro storage. Through a comparative analysis approach and eight weeks of data collection, the study addressed key research questions related to solar radiation patterns and optimal system design. The findings highlighted regions with heightened solar radiation levels, showcasing substantial potential for power generation and emphasizing the system's efficiency. Optimizing system design significantly boosted power generation, promoted renewable energy utilization, and enhanced energy storage capacity. The study underscored the benefits of optimizing hybrid solar PV panels and pumped hydro energy supply systems for sustainable energy usage. Optimizing the design of solar PV panels and pumped hydro energy supply systems as examined across diverse climatic conditions in a developing country, not only enhances power generation but also improves the integration of renewable energy sources and boosts energy storage capacities, particularly beneficial for less economically prosperous regions. Additionally, the study provides valuable insights for advancing energy research in economically viable areas. Recommendations included conducting site-specific assessments, utilizing advanced modeling tools, implementing regular maintenance protocols, and enhancing communication among system components.

Design and Analysis of Algorithms-DP,Backtracking,Graphs,B&B

Sreedhar Chowdam

Top 10 Oil and Gas Projects in Saudi Arabia 2024.pdf

Teleport Manpower Consultant

在线办理(ANU毕业证书)澳洲国立大学毕业证录取通知书一模一样

obonagu

学校原件一模一样【微信：741003700 】《(ANU毕业证书)澳洲国立大学毕业证》【微信：741003700 】学位证，留信认证（真实可查，永久存档）原件一模一样纸张工艺/offer、雅思、外壳等材料/诚信可靠,可直接看成品样本，帮您解决无法毕业带来的各种难题！外壳，原版制作，诚信可靠，可直接看成品样本。行业标杆！精益求精，诚心合作，真诚制作！多年品质 ,按需精细制作，24小时接单,全套进口原装设备。十五年致力于帮助留学生解决难题，包您满意。本公司拥有海外各大学样板无数，能完美还原。 1:1完美还原海外各大学毕业材料上的工艺：水印，阴影底纹，钢印LOGO烫金烫银，LOGO烫金烫银复合重叠。文字图案浮雕、激光镭射、紫外荧光、温感、复印防伪等防伪工艺。材料咨询办理、认证咨询办理请加学历顾问Q/微741003700 【主营项目】一.毕业证【q微741003700】成绩单、使馆认证、教育部认证、雅思托福成绩单、学生卡等！二.真实使馆公证(即留学回国人员证明,不成功不收费) 三.真实教育部学历学位认证（教育部存档！教育部留服网站永久可查）四.办理各国各大学文凭(一对一专业服务,可全程监控跟踪进度) 如果您处于以下几种情况： ◇在校期间，因各种原因未能顺利毕业……拿不到官方毕业证【q/微741003700】 ◇面对父母的压力，希望尽快拿到； ◇不清楚认证流程以及材料该如何准备； ◇回国时间很长，忘记办理； ◇回国马上就要找工作，办给用人单位看； ◇企事业单位必须要求办理的 ◇需要报考公务员、购买免税车、落转户口 ◇申请留学生创业基金留信网认证的作用: 1:该专业认证可证明留学生真实身份 2:同时对留学生所学专业登记给予评定 3:国家专业人才认证中心颁发入库证书 4:这个认证书并且可以归档倒地方 5:凡事获得留信网入网的信息将会逐步更新到个人身份内，将在公安局网内查询个人身份证信息后，同步读取人才网入库信息 6:个人职称评审加20分 7:个人信誉贷款加10分 8:在国家人才网主办的国家网络招聘大会中纳入资料，供国家高端企业选择人才

road safety engineering r s e unit 3.pdf

VENKATESHvenky89705

Railway Signalling Principles Edition 3.pdf

TeeVichai

Technical Drawings introduction to drawing of prisms

heavyhaig

Immunizing Image Classifiers Against Localized Adversary Attacks

gerogepatton

This paper addresses the vulnerability of deep learning models, particularly convolutional neural networks (CNN)s, to adversarial attacks and presents a proactive training technique designed to counter them. We introduce a novel volumization algorithm, which transforms 2D images into 3D volumetric representations. When combined with 3D convolution and deep curriculum learning optimization (CLO), itsignificantly improves the immunity of models against localized universal attacks by up to 40%. We evaluate our proposed approach using contemporary CNN architectures and the modified Canadian Institute for Advanced Research (CIFAR-10 and CIFAR-100) and ImageNet Large Scale Visual Recognition Challenge (ILSVRC12) datasets, showcasing accuracy improvements over previous techniques. The results indicate that the combination of the volumetric input and curriculum learning holds significant promise for mitigating adversarial attacks without necessitating adversary training.

Nuclear Power Economics and Structuring 2024

Massimo Talia

Heap Sort (SS).ppt FOR ENGINEERING GRADUATES, BCA, MCA, MTECH, BSC STUDENTS

Soumen Santra

Recently uploaded (20)

weather web application report.pdf

Pile Foundation by Venkatesh Taduvai (Sub Geotechnical Engineering II)-conver...

Unbalanced Three Phase Systems and circuits.pptx

Cosmetic shop management system project report.pdf

Water billing management system project report.pdf

The Role of Electrical and Electronics Engineers in IOT Technology.pdf

AKS UNIVERSITY Satna Final Year Project By OM Hardaha.pdf

CW RADAR, FMCW RADAR, FMCW ALTIMETER, AND THEIR PARAMETERS

Governing Equations for Fundamental Aerodynamics_Anderson2010.pdf

Steel & Timber Design according to British Standard

Hybrid optimization of pumped hydro system and solar- Engr. Abdul-Azeez.pdf

Design and Analysis of Algorithms-DP,Backtracking,Graphs,B&B

Top 10 Oil and Gas Projects in Saudi Arabia 2024.pdf

在线办理(ANU毕业证书)澳洲国立大学毕业证录取通知书一模一样

road safety engineering r s e unit 3.pdf

Railway Signalling Principles Edition 3.pdf

Technical Drawings introduction to drawing of prisms

Immunizing Image Classifiers Against Localized Adversary Attacks

Nuclear Power Economics and Structuring 2024

Heap Sort (SS).ppt FOR ENGINEERING GRADUATES, BCA, MCA, MTECH, BSC STUDENTS

AMIS Wallet Service

1. Wallet Service AMIS WS 如何提供便捷安全的錢包服務 07/15/2020

2. Wallet Service AMIS WS 如何提供便捷安全的錢包服務 07/15/2020

3. About AMIS Fintech Regulatory Sandbox Blockchain & Research Wallet Service

4. Fintech Regulatory Sandbox

5. Blockchain & Research

6. About Me AMIS MaiCoin HTC Wyse / Dell Noodle Labs / TunesAccess Oracle Stanford NCCU

7. 一句話描述 Wallet Service 提供高可用性 API 且安全的數位資產錢包服務 (Secure cloud digital asset wallet service with highly available API)

8. 一張圖描述 Wallet Service Node Cluster Key Storage +

9. 一張圖總結 Wallet Service Reliable developer API Professional & economical node operation Wallet security

10. Case Study: OMNI USDT 假入金security https://www.coinness.com/news/582082 ● 常見手法：駭客利用真的交易，假的內容騙收款者或是交易所收到款項。 ● OMNI 常見手法：使用非 USDT Property ID

11. 全都是 Tether US

12. USDA USDB USDC USDE USDS USDT

13. 31 才是通用的 USDT

14. Case Study: Geth RPC 誤用security ● Geth：以太坊官方節點，提供節點及錢包功能。 ● Geth RPC：Geth 提供給程式操作的接口。

15. Case Study: Geth RPC 誤用security

16. Case Study: Geth RPC 誤用security ● 搭配服用： 1. Geth RPC 沒鎖內網 2. 使用預設連接埠 8545 3. 接受任意來源 IP 4. 使用 unlockAccount，就算只 unlock 1s

17. Key Generation & Encryption AMIS Service Service Cluster Storage Cluster 1.new_address 2.gen encryption key Recursive multi-layered distributed key 3.distributed key encryption 4.distributed secure storage security

18. Client Protection App Service AMIS Service Dual certification Multi-factor authentication IP whitelisting End 2 end encryption Key rotation Policies security

19. Case Study: Gas Price 急速飆升Operation

20. Case Study: Gas Price 急速飆升Operation

21. Case Study: Gas Price 急速飆升Operation https://ethgasstation.info/

22. Case Study: Gas Price 急速飆升Operation AMIS Gas Price Prediction (GPP) 200 Gwei P95

23. Case Study: Gas Price 急速飆升Operation AMIS Transaction Watcher 89 86 ~ 103

24. Case Study: 雲端服務帳號／資料無預警遺失Operation

25. Case Study: 雲端服務帳號／資料無預警遺失Operation ● AWS 在 2017年就因為一位開發人員的失誤而造成了大規模的服務中斷。 ● Azure 在2018年則是因為天災而造成硬體裝置損毀。 ● GCP 在2019年則是發生了近三年最大規模的當機。

26. Cross Cloud BackupOperation

27. Professional & Economical OperationOperation Kubernetes Powered Cluster Smart Node Management Cross Cloud Backup

28. Reliable Developer APIAPI Scalable Explorer API Webhooks & Alerts Customizable API

29. 一張圖總結 Wallet Service Reliable developer API Professional & economical node operation Wallet security

30.

31. Digital Signature

32. Signature Generation & Verification

33. Moving Toward Decentralization - Multisignature Wikipedia: Multisignature (multi-signature) is a digital signature scheme which allows a group of users to sign a single document.

34. Bitcoin Multisig ● 原生 Multi-signature 1. Locking script: M <Public Key 1> <Public Key 2> ... <Public Key N> N OP_CHECKMULTISIG 2. Unlocking script: OP_0 <Signature 1> <Signature 2> … <Signature M> ● 或用 P2SH（較常見） 1. Redeem script + Locking script: <2 PK1 PK2 PK3 PK4 PK5 5 OP_CHECKMULTISIG> OP_HASH160 <redeem scriptHash> OP_EQUAL 2. Unlocking script: <Sig1> <Sig2> 2 PK1 PK2 PK3 PK4 PK5 5 OP_CHECKMULTISIG

35. Ethereum Multisig https://github.com/gnosis/MultiSigWallet

36. Ethereum Multisig

37. Ethereum Multisig

38. Ethereum Multisig

39. Keyless Wallet: Threshold Signature MPC for signature generation Private key never exposed!

40. Keyless Wallet: Threshold Signature

41. @getamis/alice

42. Hierarchical Threshold Signature Regular shares High level shares

43. Hierarchical Threshold Signature

44. HTSS Use Case: 數位資產銀行保管箱圖片來源：永豐銀行

45. HTSS Use Case: Multisig Mobile Wallet AMIS Service Users MPC for signature generation App Service

46. https://am.is