Technological infrastructure components of the service

The main components of the specialized crypto-custodial service have been developed:

• Fully functional backend with the software complex «Black Box + Safina API»;
• Electronic document management system with configured business processes;
• Accounting system.

The solution is based on the principles of storing information in both centralized and decentralized systems, and proprietary mechanisms for multi-signature and private key storage have been developed.

Black Box is an integral part of the C4C infrastructure, serving as the central element for managing crypto assets. Its functionality includes encryption and key storage subsystems, defining rules for processing secret keys and interacting with the blockchain.

Located in a specially segmented zone, the Black Box actively blocks unauthorized access to the internal network, strictly adhering to the established rules set during creation. This server generates wallets, stores private keys, signs transactions, and sends them to the blockchain.

Access privileges to this server are strictly limited, ensuring the integrity of wallet private keys and preventing unauthorized actions by employees. This ensures high security and reliability in managing crypto assets within the C4C service.

Its main features:

• Protection against unauthorized physical access to information;
• External outgoing network rules allow communication only with three fixed nodes (HTTPS), two management servers (encrypted traffic between Domino servers);
• Wallet key storage (authorization of usage, reducing the risk of loss);
• Validation of incoming transactions;
• Validation and initiation of outgoing transactions;
• Protection against external digital attacks;
• Protection against physical equipment attacks;
• Protection against client coercion to submit an operation order;
• Logging of operation requests and operations themselves;
• Transmission of transaction requisites to the financial accounting system;
• Provision of asset owner with operational information about wallet balance.

Safina API is an application server specifically designed to ensure seamless interaction between the Black Box and external networks. An important feature of this component is the centralized storage of the wallet's private key in the Black Box, as opposed to distributing it among co-signers and the wallet owner. Electronic signatures of wallet participants are generated by the Safina application server, after which they are transmitted to the Black Box for integration into the parameters of the corresponding wallets. This approach not only ensures efficient management of signatures but also maintains a high level of security when making changes to wallet parameters.

Integrating the multi-signature system into an electronic document management system based on HCL Notes is a key element that provides an additional level of security for crypto asset operations. This integration controls and confirms signatures within document management, creating an additional barrier to protect client assets.

The electronic document management system with configured business processes ensures secure exchange of structured information and electronic documents.

Electronic document management enables transparent tracking of all documents and transactions within the system. This allows for comprehensive monitoring of operations, transaction statuses, and other important events, contributing to improved asset control and management.

Electronic documents, signatures, and other digital attributes are supported using multi-layered security measures, including encryption and digital signatures.

Configurable business processes integrated into document management allow for the automation of many routine operations such as data verification, request processing, and report generation.

This reduces operation times and enhances overall operational efficiency. It also includes functions for accounting, data processing, and updating, ensuring the accuracy and reliability of information about crypto asset holders. This is a key aspect for compliance with requirements and standards in the field of crypto custody.

Special business processes within the electronic document management system:

• Creating a counterparty card in the database:

This process involves collecting and registering basic information about the counterparty, such as personal data, legal information, and credentials. Creating a counterparty card provides convenient access to information and management of the client database.

• KYC/KYB user verification:

Know Your Customer (KYC) and Know Your Business (KYB) verification processes are aimed at verifying the authenticity of the client and their activities. It includes gathering and analyzing documents, as well as conducting checks to comply with legal requirements.

• Signing a contract with the client:

Electronic contract signing with clients, including necessary legal information and agreement on terms. The process ensures transparency and ease of documentation for concluded deals.

• Wallet creation:

A process allowing clients to create cryptocurrency wallets for safe and convenient asset storage. It includes generating a unique wallet address and setting additional security measures.

• Deposit and withdrawal of funds:

Provides users with the ability to deposit and withdraw funds from their wallets, including determining amounts, choosing transaction methods, and confirming operations.

• Transaction confirmation procedure for fund withdrawal in case of increased limit:

An additional security step that comes into effect when certain withdrawal limits are reached. It involves user confirmation and possibly additional authentication steps.

• Issuing a smart contract and token according to client-specified parameters:

A process allowing clients to create their unique smart contracts and tokens according to specified parameters. It includes setting rules and parameters for token operation.

• Compliance and responding to suspicious transactions:

Implements measures to comply with legal requirements and detect suspicious transactions. It includes monitoring and analyzing operations, as well as responding to anomalies.

These special business processes in the electronic document management system provide a complete lifecycle of client interaction and asset management, compliance with legal requirements, and transaction security.

The accounting system is a powerful tool for managing financial data and client assets. Specifically designed to impact various aspects of business processes, this accounting system aims to ensure accuracy, reliability, and efficiency in cryptocurrency asset management.

The accounting system fully automates data processing, reducing the risk of potential errors and ensuring prompt updates of asset information. This increases the efficiency of financial data management.

Close integration with blockchain technology ensures transparency and reliable tracking of each transaction and changes in asset composition. Clients can be confident in the security and reliability of financial information.

Direct data flow from the blockchain provides a high degree of transaction transparency, allowing clients to track and analyze changes in their portfolio in real-time.