EthCC 2: Lisa Chu

ETHCC 2 · 10 Mar 2019 · 14:41

HTC's product manager presents the Exodus 1 blockchain phone, whose Zion vault keeps keys in the phone's trusted execution environment and shows a trusted interface for typing passwords and authorizing payments. The case made is that users should hold their own keys because a central database invites hackers. An optional social recovery splits the seed with Shamir secret sharing among three to five trusted contacts, and an API and SDK let apps use the hardware vault, shown with a browser partner that supports public-key login.

Speakers

Topics

From ETHCC 2, hosted by Ethereum France.

Transcript

and I'm the product manager for our product Exodus 1 so like like what Bruce Lee's one set because I'm Chinese I have to reference so he said be water my friend we have been bounded by forms and rules created by these big corporations and they decided what our profile will look like what our profile to include what our data should go and even you know what ad we should see so the beauty of blockchain we believe is like water it's flexible and yet to yet the water is able to destruct and then rebuild a foundation of trust again so that's what what the exodus projects is about so is there anyone who doesn't know what

blockchain is in the room I don't I probably don't think though because we really go to a lot of conference and we present a lot of cool you know techniques at technology and the first question I get is so what is what changed you know with the Exodus project being almost 1 years old we have so many things we're planning to do with a goal to build a foundation of trust and security for the blockchain ecosystem mobile device so HTC has been a mobile manufacturer for those who don't know us yet we are born and made in Taiwan proudly and we have in a mobile manufacturer for more than 20 years we've been building trusted mobile devices for the world and we think it is

natural to want to grow a community based on mobile devices when you look at how mobile devices has replaced so many things and functions in our life nowadays so just last week at MWC and we're really excited about our announcing our partnership with opera their first native web 3.0 browser and together we are then able to rebuild and we were able to really build it on floor for a secure and user-friendly blockchain ecosystem so I want to show you a video we have that talks about our collaboration with opera anyways

anyways you can't you can see our collaboration with opera is really not just pre-loading an application so as our first partner integrated with the Zion key management API we're actually demonstrating a allowing users to be guarded I want all secure har wallet while exploring the blockchain application intuitively and freely and this video so it is it is actually really exciting

when you think about it so we can now use our public key to log in across platforms and we're able to view and explore seamlessly and we don't we don't have those ridiculous on unified user name/password that have to recreate every time I log in different you know different applications because it's so hard to remember your assets are now more secure and can finally be able to direct make direct micro payments to services and organizations and this collaboration also opens up a new wait for business opportunities and supports as well for example I'm not able to contribute writers arts musics and even donate to not profit easier and we can still view all the website we enjoy on the Opera PC

version and then when authorizing payments we'll just turn to the exits one to do the secure payment directly so we did get some arguments about you know why do you want to make a blockchain phone and there's not so much blocking one could explore but we think someone's gotta start somewhere some you know some words at some point and it is art responsibly as a developer and a manufacturer to make sure the newbies or people that are not so could be as safe as we possibly can help them in order to really scale out the community base so that the term blockchain can't be scary enough for common people not to mention showing the nonsense while it address stated to them

and this is why starting with something they're very familiar with and slowly lure them into benefits of blockchain is a good start but you know everyone user browse nowadays and free technically and users don't really feel much of a difference if you're using watching technology or not so we think that you know having this secure environment plus the seamless experience would really help them you know go into what we call what 3.0 and blockchain industry era and by the time they realize they buy already you know using ether to buy pizza and hopefully less than ten thousand Bitcoin in order to extend security to what we're used to we also

we also need to build a secure environment to protect our users crypto assets so in the crypto space if you don't own your key own keys you don't really own your crypto currency and assets so this is what we this is really important if you don't own your keys you don't really own your cryptocurrencies and assets and why should why shouldn't we have our ownership to our own assets data items even identity and why is owning our keys so important it is not that those companies that whether banks are big data companies are not secure they're very secure in many ways but the problem is they're so - men too much incentives for hackers to steal these

information I think anyone who knows me knows this having a database that sweet spot basically tells all the digital thief at you know hey all the valuables and sensitive informations are here come hack me so the reason you need a holder private key is now although the risks are spread of a spread among all your individual devices so it is much more sophisticated and complicated for people to steer our identity and there are there have been sold multiple data breaches from companies such as Facebook Google and you know Sony Target and even Amazon and they these are all very well-known and trustworthy brands we're not pinpointing any of these companies and there are risk to you know

be your own bank as well but it does take practice in education to own your own assets and learn to keep them safe with this belief that users should own their own crypto and control we created Zion the all-in-one private vault on the blockchain so starting with the Zion vault we are utilizing what we already have in the phone 80 EE trusted execution environment to safeguard the keys so T EE runs in parallel of the operating system in an isolated environment trusted applications running and TE have access to main processor and memory whereas harbour isolation protects these components from user

install application running the main operating system so software and cryptographic isolation inside the TE protect different containers an application from each other so on top of te e we have a trusted UI where users are typing when users are typing Pascal or authorizing payment it will all be done under a trusted UI we're not even Android can access so by providing this safe environment for users we think it's an entry port to empower user to have their own keys so that's how we are protecting the private keys aren't the exodus and then we created the social key recovery mechanism this feature is

optional on top of the twelve words the recovery phrase so basically you can set up three to five trusted contexts of your choice iPhone app and Zion will break your seed and crypt using Shamir secret sharing when you touch the contact will help you recover the wallet and we have an example of the use case so let's say mr. Donald Trump bought at Exodus one and he created the sign wallet and did what he was told secure his C phrase and the vault in the White House and he travel around to travel around the world to promote world peace and I'm the way to North Korea he's Exodus one drop and fell off Air

Force One let's say with the C phrase lock in the White House like everyone else do we keep our you know C phrase very safely he can access his wallet to pay for gas for the Air Force One and luckily mr. Trump remembers to set up the Scioscia key recovery so he called his trusted contact butene presidency and of course president back home at the gas station and was able to recover all the wallet for him from his trusted contacts so you get the idea of how so tricky where we come in to rescue originally you have a real key recovery no other device has ever given users ownership of owning the Exodus one is

first owning your keys crypto currencies crypto asset this lays the foundation to later owning your digital power the problem is what happens when you lose your soul well that's this one of powers you will be keys it also means that HTC centralized cloud just like in real life for your loss to the answers we decided mechanism for you to rely on your close family in French besides using your unique cohort recovery you have the choice to opt in to restore your wallet because the high

on social recovery mechanism that's not least ours our humanity PI ensemble SDK is available we could we would like to work with anyone who leaves the same led use their only on the identification of trust and security so the Zion API will allow you to store your key in the TE directly and it will provide an added value to your users on exodus and your users will also be protected by the trusty UI when authorizing transactions and and more the DC is actually generated from te as well for example sdk it allows you to save resources to maintain your own wallet so for those

tab owners who doesn't want to spend resource on creating your own wallet you can choose to use design bold sdk which would provide a secure hardware wallet and it's user-friendly as well we're also open to work with projects that believe in people owning their own data decentralization and allowing users to practice this beliefs we have the disease are the available functions from the API and SDK we're allowing and one thing that's a little bit special is to slice we have the slice insert that you could you know think of creative way of presenting an information from your data from your tap directly on zyanya or

within your adapt so that's a pretty cool function an example is we are actually capturing a pricing history data directly on Zion so that's something we would like to do for our users in the future so that's a slice example so join us to build a foundation of trusted security or if you just wanted to say hi with always happy to learn more about the projects going on there some me--just industry right now and we're not trying to build everything on our own and it's practically impossible we are not perfect we are pretty new to the industry relatively speaking and there

is still really long way to go and we're just really happy and lucky to be part of this journey with the industry so we have built a really cool platform you know with our partners and some really cool SDK API so please please please if you are interested in expanding into the mobile mobile community for blockchain please feel free to connect us and you know find me my team afterwards thank you so much [Applause]