CipherTrace has released TRISA, which might help cryptocurrency businesses comply with regulations like the travel rule in a privacy-preserving way.

robots

twitter:card

twitter:description

CipherTrace Travel Rule Fix for Cryptocurrency Firms - Bitcoin Magazine

twitter:title

https://admin.bitcoinmagazine.com/wp-content/uploads/2019/09/temp_copy_49.jpg

twitter:image

Privacy &amp; security

Regulation

Ciphertrace

Fatf

travel rule

TRISA

ciphertrace

compliance

cryptocurrency

cryptocurrency businesses

cryptocurrency exchanges

cryptocurrency travel

cryptocurrency travel rule

data

exchanges

information

Blockchain security firm CipherTrace has formally announced the release of its Travel Rule Information Sharing Architecture (TRISA); a new way for cryptocurrency businesses to satisfy regulatory pressure to enforce the travel rule, which requires financial institutions to share information of fund transfers.



TRISA is described as a reference implementation that can be integrated into cryptocurrency exchanges and wallet provides, provided for free as open-source software. Additional authentication, revocation or security services can then be purchased from CipherTrace or another provider. More details about how it works technically can be found in its <a href="https://ciphertrace.com/wp-content/uploads/2019/08/TRISA-Enabling-FATF-Travel-Rule-V4.pdf">white paper</a>.



<h2>Growing Pressure for a Cryptocurrency Travel Rule</h2>



CipherTrace’s TRISA protocol comes as pressure has been building for cryptocurrency businesses to comply with the travel rule and it isn’t the firm’s first bid to bolster compliance. After the Financial Action Task Force (FATF) <a href="https://bitcoinmagazine.com/articles/fatf-finalizes-crypto-guidelines-recommends-exchanges-share-client-data?fbclid=IwAR2kU6Jx9SmLaiZv7iBOqRheaNLjdBHaF_HpuIIQqjKBoUWoEhgwSaZqFtg">finalized</a> recent recommended guidelines for cryptocurrency exchanges, which included information sharing similar to that called for by the travel rule, CipherTrace partnered with Shyft to <a href="https://bitcoinmagazine.com/articles/ciphertrace-shyft-team-id-protecting-solution-fatf-crypto-guidance?fbclid=IwAR2N7laiVRif4lv3KHa1hPtFn4JFCIFOiHPy3zfrcBtn6g4NKify3GkbKXI">unveil</a> a new ID protection system in July 2019.



Dave Jevans, CipherTrace’s founder and CEO, detailed how TRISA builds on some of the previous work that CipherTrace has done.&nbsp;



“[TRISA is] a foundational layer that will set up the trust relationships between VASPs [virtual asset service providers], manage the encryption keys and confidentially exchange travel rule data,” he told Bitcoin Magazine. “It is about secure, reliable delivery of PII [personally identifiable information] to the correct VASP, which eliminates a huge risk for exchanges.”



In addition to framing TRISA as a way to protect privacy while complying with regulations, Jevans pointed out that Shyft will “contribute privacy-preserving features to enable compliance with GDPR and other privacy regimes” as it is implemented.



<h2>Privacy-Preserving Cryptocurrency Travel Rule Compliance</h2>



The FATF’s recommendations would make it necessary for all VASPs to share and store both sender and receiver data for all cryptocurrency transactions, and TRISA aims to make connections between these VASPs more secure.&nbsp;



“TRISA is about confidentiality and ensuring reliable delivery of transaction information,” Jevans said. “The reference implementation relies on the VASPs to secure the data in their possession — i.e., ‘at rest.’ It guards against information leaks by using TLS 1.3 with forward privacy to encrypt data in transit.”



The company’s announcement of the protocol notes that Binance is already looking at TRISA as a solution for FATF compliance.&nbsp;



“We have witnessed significant interest from large VASPs in the G20 countries,” Jevans said, adding that CipherTrace “hope[s] to have several major exchanges participate in the upcoming proof of concept and interoperability testing.”

Bitcoin Magazine provides news, analysis, information, commentary and price data about Bitcoin.

Bitcoin Magazine

Landon Manning is an editorial intern at BTC Media and writes articles for its publications, including Distributed.com and Bitcoin Magazine.

Landon Manning

CipherTrace Travel Rule Fix for Cryptocurrency Firms

CipherTrace Travel Rule Fix for Cryptocurrency Firms page sep sitename

Blockchain security firm CipherTrace has formally announced the release of its Travel Rule Information Sharing Architecture (TRISA); a new way for cryptocurrency businesses to satisfy regulatory pressure to enforce the travel rule, which requires financial institutions to share information of fund transfers. TRISA is described as a reference implementation that can be integrated into cryptocurrency exchanges and wallet provides, provided for free as open-source software. Additional authentication, revocation or security services can then be purchased from CipherTrace or another provider. More details about how it works technically can be found in its white paper. Growing Pressure for a Cryptocurrency Travel Rule. CipherTrace&rsquo;s TRISA protocol comes as pressure has been building for cryptocurrency businesses to comply with the travel rule and it isn&rsquo;t the firm&rsquo;s first bid to bolster compliance. After the Financial Action Task Force (FATF) finalized recent recommended guidelines for cryptocurrency exchanges, which included information sharing similar to that called for by the travel rule, CipherTrace partnered with Shyft to unveil a new ID protection system in July 2019. Dave Jevans, CipherTrace&rsquo;s founder and CEO, detailed how TRISA builds on some of the previous work that CipherTrace has done.&nbsp; &ldquo;[TRISA is] a foundational layer that will set up the trust relationships between VASPs [virtual asset service providers], manage the encryption keys and confidentially exchange travel rule data,&rdquo; he told Bitcoin Magazine. &ldquo;It is about secure, reliable delivery of PII [personally identifiable information] to the correct VASP, which eliminates a huge risk for exchanges.&rdquo; In addition to framing TRISA as a way to protect privacy while complying with regulations, Jevans pointed out that Shyft will &ldquo;contribute privacy-preserving features to enable compliance with GDPR and other privacy regimes&rdquo; as it is implemented. Privacy-Preserving Cryptocurrency Travel Rule Compliance. The FATF&rsquo;s recommendations would make it necessary for all VASPs to share and store both sender and receiver data for all cryptocurrency transactions, and TRISA aims to make connections between these VASPs more secure.&nbsp; &ldquo;TRISA is about confidentiality and ensuring reliable delivery of transaction information,&rdquo; Jevans said. &ldquo;The reference implementation relies on the VASPs to secure the data in their possession &mdash; i.e., &lsquo;at rest.&rsquo; It guards against information leaks by using TLS 1.3 with forward privacy to encrypt data in transit.&rdquo; The company&rsquo;s announcement of the protocol notes that Binance is already looking at TRISA as a solution for FATF compliance.&nbsp; &ldquo;We have witnessed significant interest from large VASPs in the G20 countries,&rdquo; Jevans said, adding that CipherTrace &ldquo;hope[s] to have several major exchanges participate in the upcoming proof of concept and interoperability testing.&rdquo;

Landon Manning is a writer for Bitcoin Magazine.

description

max-snippet:-1, max-image-preview:large, max-video-preview:-1

As cryptocurrency service providers rush to find solutions for the FATF travel rule guidance, they may already have a ready-to-deploy solution from Netki.

Netki Offers Solution for FATF Travel Rule - Bitcoin Magazine

https://admin.bitcoinmagazine.com/wp-content/uploads/2019/09/temp-2.jpg

Netki

bip 75

bitcoin

bitcoin ecosystem

compliant ecosystem

cryptocurrency service

cryptocurrency service providers

honeypots of transaction

honeypots of transaction and identity

identity information

institutions to share

“Bitcoin is growing and many people recognise that it is thriving today and will continue to thrive in the future. Accepting this begs the question — how do [privacy and identity] operate together?”



So asks PricewaterhouseCoopers (PwC) in its <a href="https://www.pwc.com/sg/en/financial-services/assets/fintech/fintech-trusted-bitcoin-ecosystem-whitepaper-201706.pdf">“Trusted Bitcoin Ecosystem White Paper,”</a> a 2017 summary of a proof-of-concept for regulatory-compliance bitcoin transactions.



The very concept of “Trusted Bitcoin,” to many of us, is an oxymoron, but it strikes to the core of a tension emerging alongside Bitcoin’s prominence: How can officials corral such an incorrigible technological beast into the bullpen of existing regulation?



“For regulators and institutions,” PwC’s report continues, “[how privacy and identity interact] presents a challenging decision. Do they choose to engage the technology and market opportunity or not? Do they attempt to control or not? As cryptocurrencies at odds with regulation (privacy related or not) continue to proliferate, these questions will become increasingly important.”



Increasingly important indeed. The central issue behind PwC’s question has been blown open lately, following <a href="https://bitcoinmagazine.com/articles/fatf-finalizes-crypto-guidelines-recommends-exchanges-share-client-data">the recommendation by the G7’s Financial Action Task Force</a> (FATF) that cryptocurrency service providers (e.g., exchanges, wallets and other similar companies) comply with the travel rule — a banking mandate that requires institutions to share identity information on users for transfers equal to or greater than $1,000.



<h2>A “Compliant Ecosystem” for Bitcoin Companies</h2>



As cryptocurrency service providers rush to find solutions that satisfy the FATF recommendation, they may already have a ready-to-deploy solution that doesn’t require changes to established laws.



“Our solution meets global regulatory requirements today, without requiring the regulator to change,” Netki CEO Justin Newton told Bitcoin Magazine.



Founded in 2014, Netki believes that it has devised an answer to this question with its TransactID solution, which was also cited by PwC in its Trusted Bitcoin Ecosystem trial. During the trial, conducted for the Monetary Authority of Singapore (MAS), the Singaporean agency “asked for examples of how to build a compliant ecosystem, [and] the only solution they found in use by a regulated entity was ours,” according to Newton.



This solution leverages a modified version of <a href="https://bitcoinmagazine.com/articles/does-bip-really-threaten-bitcoin-s-fungibility-1467302909">BIP 75</a>, an improvement proposal that Netki drafted in 2016 in cooperation with BRD wallet, and x.509 certificates, a decades-old public key framework that undergirds HTTPS web browsing. On the surface, the improvement proposal has practical applications for creating ID/address lists for public keys. This makes wallets more “readable” and user friendly, and it is part of the reason BRD backed the proposal.



It also allows its users to store additional identity information other than names, such as addresses and emails. Upon BIP 75’s unveiling, community members, like then Core contributor Peter Todd, voiced privacy concerns as they became worried the proposal would be used for KYC purposes. These caveats were valid, and even prescient, because this is exactly how Netki intends to use the solution.&nbsp;



“I think that their concerns are understandable and are something we thought about as we were approaching the protocol,” Newton, who helped to architect BIP 75, told Bitcoin Magazine. “It is for that reason that we designed the protocol in a way that, while it allows companies to meet their compliance requirements, it doesn’t create things like centralized chokepoints, honeypots of transaction and identity data tied together or other items that would give regulators wider or deeper controls or views than they are strictly entitled to by law.”



<h2>Ready-to-Deploy Solution</h2>



Newton continued to say that Netki does not “claim to provide an anonymous solution, but users privacy is a core tenet of [its] design.” The second-layer technology creates a private, encrypted channel between the wallets involved in a transaction to facilitate a closed loop flow of information. None of this information touches the public ledger and it exists in a vacuum; because the channels are encrypted and strictly between two entities, they are not aggregated into the “honeypots of transaction and identity data” that lead to such leaks as the Equifax breach in 2017.



“The protocol is designed with the concept of minimal disclosure in mind, so that the counterparties can choose to exchange only the bare minimum of data either required by law, or desired by the participants,” Newton said.&nbsp;



This flexibility will be key for meeting the needs of regulators in different jurisdictions. For instance, in the U.S., the travel rule only applies to transfers between money services businesses, while, in places like Switzerland, it applies in any case, be the recipients/senders of a transaction a bank or individual.



Netki also believes its solution is the only completely compliant tool available to officials at the moment. <a href="https://bitcoinmagazine.com/articles/ciphertrace-shyft-team-id-protecting-solution-fatf-crypto-guidance">CipherTrace and Shyft unveiled</a> their own solution to FATF’s guidance in July 2019. Using zero-knowledge proofs, the software allows institutions to share references to KYC data without divulging the data itself. Newton claimed that this won’t cut it for regulators who require that “information actually be exchanged between the counterparties in the transaction,” not just references to this information.



As such, Netki goes the full nine yards to provide all of the relevant KYC data in a way that, according to it, doesn’t expose this info to anyone but the two parties involved in the transaction. Netki actually created BIP 75 “to meet compliance requirements around U.S. Treasury’s travel rule, as well as OFAC [Office of Foreign Assets Control] or sanctions requirements worldwide,” Newton said.



<h2>Compliance Necessary?</h2>



This impetus came after Ripple filed a consent decree with the Financial Crimes Enforcement Network (FinCEN) in 2015 that noted it had violated the travel rule and would comply with it going forward. Unbeknownst to many, FinCEN actually indicted that cryptocurrency service providers were subject to the travel rule in 2013. Only recently have other jurisdictions been brought into the conversation, following FATF’s recommendations and Bitcoin exceeding the wider public’s expectations.



Newton sees the travel rule, and officials’ cracking down on businesses that don’t heed it, as an “existential threat” to the cryptocurrency ecosystem. Compliance is inevitable, he believes, and the cryptocurrency ecosystem’s infrastructure will eventually be subsumed by existing regulations and red tape.&nbsp;



“I believe that we are going to see increasing controls put on cryptocurrency networks over time,” Newton said. “This is a natural evolution as the value of networks grow, as the more value there is moving through the network, the more risk it poses from a regulator’s perspective and the more controls that need to be put in place.”

Colin is an associate editor and staff writer for Bitcoin Magazine. He&#39;s proud to call Nashville his home, where he lives with his family and doesn&#39;t eat hot chicken as much as you might think.

Colin Harper

Netki Offers Solution for FATF Travel Rule

Netki Offers Solution for FATF Travel Rule page sep sitename

&ldquo;Bitcoin is growing and many people recognise that it is thriving today and will continue to thrive in the future. Accepting this begs the question &mdash; how do [privacy and identity] operate together?&rdquo; So asks PricewaterhouseCoopers (PwC) in its &ldquo;Trusted Bitcoin Ecosystem White Paper,&rdquo; a 2017 summary of a proof-of-concept for regulatory-compliance bitcoin transactions. The very concept of &ldquo;Trusted Bitcoin,&rdquo; to many of us, is an oxymoron, but it strikes to the core of a tension emerging alongside Bitcoin&rsquo;s prominence: How can officials corral such an incorrigible technological beast into the bullpen of existing regulation? &ldquo;For regulators and institutions,&rdquo; PwC&rsquo;s report continues, &ldquo;[how privacy and identity interact] presents a challenging decision. Do they choose to engage the technology and market opportunity or not? Do they attempt to control or not? As cryptocurrencies at odds with regulation (privacy related or not) continue to proliferate, these questions will become increasingly important.&rdquo; Increasingly important indeed. The central issue behind PwC&rsquo;s question has been blown open lately, following the recommendation by the G7&rsquo;s Financial Action Task Force (FATF) that cryptocurrency service providers (e.g., exchanges, wallets and other similar companies) comply with the travel rule &mdash; a banking mandate that requires institutions to share identity information on users for transfers equal to or greater than $1,000. A &ldquo;Compliant Ecosystem&rdquo; for Bitcoin Companies. As cryptocurrency service providers rush to find solutions that satisfy the FATF recommendation, they may already have a ready-to-deploy solution that doesn&rsquo;t require changes to established laws. &ldquo;Our solution meets global regulatory requirements today, without requiring the regulator to change,&rdquo; Netki CEO Justin Newton told Bitcoin Magazine. Founded in 2014, Netki believes that it has devised an answer to this question with its TransactID solution, which was also cited by PwC in its Trusted Bitcoin Ecosystem trial. During the trial, conducted for the Monetary Authority of Singapore (MAS), the Singaporean agency &ldquo;asked for examples of how to build a compliant ecosystem, [and] the only solution they found in use by a regulated entity was ours,&rdquo; according to Newton. This solution leverages a modified version of BIP 75, an improvement proposal that Netki drafted in 2016 in cooperation with BRD wallet, and x.509 certificates, a decades-old public key framework that undergirds HTTPS web browsing. On the surface, the improvement proposal has practical applications for creating ID/address lists for public keys. This makes wallets more &ldquo;readable&rdquo; and user friendly, and it is part of the reason BRD backed the proposal. It also allows its users to store additional identity information other than names, such as addresses and emails. Upon BIP 75&rsquo;s unveiling, community members, like then Core contributor Peter Todd, voiced privacy concerns as they became worried the proposal would be used for KYC purposes. These caveats were valid, and even prescient, because this is exactly how Netki intends to use the solution.&nbsp; &ldquo;I think that their concerns are understandable and are something we thought about as we were approaching the protocol,&rdquo; Newton, who helped to architect BIP 75, told Bitcoin Magazine. &ldquo;It is for that reason that we designed the protocol in a way that, while it allows companies to meet their compliance requirements, it doesn&rsquo;t create things like centralized chokepoints, honeypots of transaction and identity data tied together or other items that would give regulators wider or deeper controls or views than they are strictly entitled to by law.&rdquo; Ready-to-Deploy Solution. Newton continued to say that Netki does not &ldquo;claim to provide an anonymous solution, but users privacy is a core tenet of [its] design.&rdquo; The second-layer technology creates a private, encrypted channel between the wallets involved in a transaction to facilitate a closed loop flow of information. None of this information touches the public ledger and it exists in a vacuum; because the channels are encrypted and strictly between two entities, they are not aggregated into the &ldquo;honeypots of transaction and identity data&rdquo; that lead to such leaks as the Equifax breach in 2017. &ldquo;The protocol is designed with the concept of minimal disclosure in mind, so that the counterparties can choose to exchange only the bare minimum of data either required by law, or desired by the participants,&rdquo; Newton said.&nbsp; This flexibility will be key for meeting the needs of regulators in different jurisdictions. For instance, in the U.S., the travel rule only applies to transfers between money services businesses, while, in places like Switzerland, it applies in any case, be the recipients/senders of a transaction a bank or individual. Netki also believes its solution is the only completely compliant tool available to officials at the moment. CipherTrace and Shyft unveiled their own solution to FATF&rsquo;s guidance in July 2019. Using zero-knowledge proofs, the software allows institutions to share references to KYC data without divulging the data itself. Newton claimed that this won&rsquo;t cut it for regulators who require that &ldquo;information actually be exchanged between the counterparties in the transaction,&rdquo; not just references to this information. As such, Netki goes the full nine yards to provide all of the relevant KYC data in a way that, according to it, doesn&rsquo;t expose this info to anyone but the two parties involved in the transaction. Netki actually created BIP 75 &ldquo;to meet compliance requirements around U.S. Treasury&rsquo;s travel rule, as well as OFAC [Office of Foreign Assets Control] or sanctions requirements worldwide,&rdquo; Newton said. Compliance Necessary? This impetus came after Ripple filed a consent decree with the Financial Crimes Enforcement Network (FinCEN) in 2015 that noted it had violated the travel rule and would comply with it going forward. Unbeknownst to many, FinCEN actually indicted that cryptocurrency service providers were subject to the travel rule in 2013. Only recently have other jurisdictions been brought into the conversation, following FATF&rsquo;s recommendations and Bitcoin exceeding the wider public&rsquo;s expectations. Newton sees the travel rule, and officials&rsquo; cracking down on businesses that don&rsquo;t heed it, as an &ldquo;existential threat&rdquo; to the cryptocurrency ecosystem. Compliance is inevitable, he believes, and the cryptocurrency ecosystem&rsquo;s infrastructure will eventually be subsumed by existing regulations and red tape.&nbsp; &ldquo;I believe that we are going to see increasing controls put on cryptocurrency networks over time,&rdquo; Newton said. &ldquo;This is a natural evolution as the value of networks grow, as the more value there is moving through the network, the more risk it poses from a regulator&rsquo;s perspective and the more controls that need to be put in place.&rdquo;

Colin is an associate editor and staff writer for Bitcoin Magazine. He's proud to call Nashville his home, where he spends his days shouting at peddle taverns and trying to find affordable parking downtown. If it wasn't already obvious, he holds bitcoin.

Tags

travel rule

CipherTrace Unveils Travel Rule Protocol for Cryptocurrency Businesses

Netki Adapts TransactID Into Fits-All Solution for FATF Travel Rule Guidance