What is ChainGuard Identity?

ChainGuard Identity is a unified Web3 identity system that creates a cryptographically verifiable link between your KYC-verified ChainGuard account, your physical ChainGuard mobile app (airgapped 2FA device), and your wallet addresses. This three-way binding ensures that vault operations require proof of ownership from both your wallet and your ChainGuard app, providing enterprise-grade security for Web3 asset management.

How does ChainGuard Identity work?

ChainGuard Identity combines four key components: 1) KYC verification through third-party providers (Sumsub, Onfido, Jumio) linked to your ChainGuard account, 2) Vault creation using factory/clone pattern (EIP-1167) for cost-efficient deployment, 3) Wallet binding through dual signature verification (wallet signature + ChainGuard app signature), 4) On-chain validation that records all identity linkages immutably on the blockchain. This creates a unified identity that works across all ChainGuard products and dApps.

What is KYC verification and why do I need it?

KYC (Know Your Customer) verification is a compliance process that verifies your identity through document checks. ChainGuard integrates with leading KYC providers (Sumsub, Onfido, Jumio) at a cost of $1.50-$5.00 per user (average $2.50). KYC provides the foundation for enterprise-grade security and compliance, creating a trusted identity that works across all ChainGuard products and can be used for compliant transactions, regulatory reporting, and enterprise integrations.

How does vault creation work?

ChainGuard uses the EIP-1167 minimal proxy pattern to deploy vaults efficiently. A factory contract is deployed once per blockchain network, and each user's vault is created as a minimal proxy clone pointing to the implementation contract. This dramatically reduces deployment costs (Base: ~$1.00, Multi-chain: ~$7.50 vs. $200+ for full deployments) while maintaining full security and functionality. The vault is initialized with your three-address configuration (Primary, 2FA, Secondary) and linked to your KYC-verified ChainGuard account identity.

What is wallet binding?

Wallet binding creates a cryptographically verifiable link between your wallet address and your ChainGuard account. This process requires signatures from both your wallet (MetaMask, etc.) and your ChainGuard mobile app, proving that you own both devices. The binding process: 1) System generates QR code with unique nonce, 2) You sign binding message with your wallet, 3) You scan QR code with ChainGuard app which signs the message, 4) Both signatures are verified on-chain using ECDSA recovery, 5) Wallet is linked to your ChainGuard identity in your user profile.

Why do I need to bind my wallet?

Wallet binding is the critical link that connects your verified ChainGuard identity to your wallet addresses. This creates a three-way binding: your KYC-verified account, your ChainGuard app (2FA device), and your wallet. This binding is essential for vault operations and provides enterprise-grade security by ensuring that vault operations require validated wallet binding, preventing unauthorized access. It also creates a unified identity that works across all ChainGuard products and dApps.

What is on-chain validation?

On-chain validation ensures that all identity linkages are cryptographically verified and permanently recorded on the blockchain. The process includes: 1) Message construction with action type, sessionId, timestamp, nonce, and wallet address, 2) Signature recovery using ECDSA to verify both wallet and ChainGuard app signatures, 3) Session validation to ensure active authenticated session exists, 4) Profile update storing wallet binding in user profile, 5) Vault linkage requiring validated wallet binding for all vault operations. This creates an immutable audit trail that cannot be tampered with.

How secure is ChainGuard Identity?

ChainGuard Identity provides enterprise-grade security through multiple layers: 1) KYC verification ensures verified identity foundation, 2) Dual signature requirement (wallet + ChainGuard app) proves ownership of both devices, 3) On-chain validation creates immutable cryptographic proof of identity linkage, 4) Three-address protocol requires multiple approvals for vault operations, 5) Airgapped mobile app operates offline for maximum security, 6) All validations recorded on blockchain preventing tampering. This combination provides institutional-level security for Web3 asset management.

Can I use ChainGuard Identity with multiple wallets?

Yes! You can bind multiple wallets to your ChainGuard Identity. Each wallet binding follows the same dual signature verification process (wallet signature + ChainGuard app signature). You can designate one wallet as your primary address and others as fallback addresses. All bound wallets are linked to your KYC-verified ChainGuard account identity and can be used for vault operations. This allows you to manage multiple wallets while maintaining a unified identity across all of them.

What happens if I lose access to my ChainGuard mobile app?

If you lose access to your ChainGuard mobile app, you can recover access through the three-address recovery system. Any two of your three addresses (Primary wallet, ChainGuard app address, Secondary address) can recover the third after a security cooldown period (24 hours). This ensures you never lose access to your assets while maintaining maximum security. The recovery process requires on-chain validation and follows the same security protocols as regular operations.

How does ChainGuard Identity work with other ChainGuard products?

ChainGuard Identity is the foundation that connects all ChainGuard products: 1) ChainGuard Vault uses your identity for multi-signature protection, 2) ChainGuard OAuth uses your identity for dApp authentication, 3) ChainGuard Mobile App uses your identity for 2FA signatures, 4) All products share the same KYC-verified account and wallet bindings. This creates a seamless, secure experience across the entire ChainGuard ecosystem - one verified identity works everywhere.

Is my identity information stored on the blockchain?

KYC verification data is processed by third-party providers (Sumsub, Onfido, Jumio) and linked to your ChainGuard account. The blockchain stores: 1) Cryptographic proof of identity linkage (signatures, addresses), 2) Wallet binding records, 3) Vault deployment addresses, 4) Transaction history. Personal KYC documents are not stored on-chain - only the verification status and cryptographic proofs are recorded. This provides privacy while maintaining the security benefits of on-chain validation.

How long does the identity setup process take?

The ChainGuard Identity setup process typically takes 15-30 minutes: 1) Account creation and setup fee payment (5 minutes), 2) KYC verification (10-20 minutes depending on provider response time), 3) Vault deployment (automatic, 1-2 minutes), 4) Wallet binding (5-10 minutes including QR code scanning and signatures). The entire process is guided and can be completed in one session. KYC verification may take longer if additional documentation is required.

Can I use ChainGuard Identity for enterprise compliance?

Yes! ChainGuard Identity is designed for enterprise compliance: 1) KYC verification meets regulatory requirements for institutional use, 2) On-chain validation provides immutable audit trail for compliance and auditing, 3) Complete transaction history with full traceability, 4) Transparent actions that are verifiable and traceable, 5) Real-time compliance monitoring and reporting. The system meets regulatory standards for institutional use and provides the foundation for compliant Web3 operations.

What is the factory/clone pattern and why does it matter?

The factory/clone pattern (EIP-1167) is a smart contract deployment optimization. Instead of deploying a full vault contract for each user (costing $50-$200+), a factory contract is deployed once per network, and each user's vault is created as a minimal proxy clone. This reduces deployment costs by 70-90% (Base: ~$1.00 vs. $50+, Multi-chain: ~$7.50 vs. $200+) while maintaining identical security and functionality. The pattern is industry-standard and used by major DeFi protocols for cost-efficient contract deployment.

How does dual signature verification work?

Dual signature verification requires signatures from both your wallet and ChainGuard app to prove ownership of both devices. The process: 1) System creates binding message with unique nonce, 2) You sign message with your wallet (proves wallet ownership), 3) You scan QR code with ChainGuard app which signs the same message (proves app ownership), 4) Both signatures are verified on-chain using ECDSA recovery, 5) System confirms both signatures recover to correct addresses. This cryptographic proof cannot be forged - you must physically control both devices to complete the binding.

What happens if my wallet binding fails?

If wallet binding fails, the system will provide specific error messages: 1) Signature mismatch - signatures don't recover to expected addresses (check wallet connection and ChainGuard app), 2) Session expired - binding session timed out (restart binding process), 3) Invalid session - session not found or not authenticated (ensure you're logged in), 4) Network error - blockchain interaction failed (retry transaction). Most issues can be resolved by restarting the binding process. Support is available if problems persist.

Can I unbind a wallet from my ChainGuard Identity?

Yes, you can unbind wallets from your ChainGuard Identity through the dashboard. However, unbinding a wallet that is used as a primary address for vault operations may require additional security verification. The unbinding process follows the same security protocols as binding - requiring confirmation from your ChainGuard app. Unbinding a wallet does not affect your KYC-verified account identity or other bound wallets.

How does ChainGuard Identity compare to other Web3 identity solutions?

ChainGuard Identity is unique in combining: 1) KYC verification with on-chain validation (most solutions offer one or the other), 2) Unified identity across vault, OAuth, and mobile app (most solutions are fragmented), 3) Factory/clone pattern for cost-efficient vault deployment (most solutions require expensive full deployments), 4) Dual signature wallet binding with on-chain proof (most solutions use simple wallet connections), 5) Enterprise compliance features with immutable audit trail. This creates a complete identity system rather than just wallet management.

What is the cost of setting up ChainGuard Identity?

The first three steps of ChainGuard Identity setup are completely free: 1) Download app and create account (FREE), 2) Wallet binding and profile (FREE), 3) Choose your path (FREE). The setup fee is only required in step 4 when you're ready to complete setup. The one-time setup fee includes: Base Chain Setup ($8.75-$22.50 with launch discount) or Extended Multi-Chain Setup ($22.50-$56.25 with launch discount). This includes: 1) KYC verification ($1.50-$5.00), 2) Vault deployment (Base: ~$1.00, Multi-chain: ~$7.50), 3) Account setup and onboarding, 4) First year free access to all ChainGuard products. There are no additional fees for identity setup - it's all included in the initial setup fee.

Can I use ChainGuard Identity for free?

Yes! You can use ChainGuard Identity for free in the first three steps: 1) Download the app and create your account (FREE), 2) Connect the app to your profile for wallet binding (FREE), 3) Choose your path - stick around for free and join the community, or proceed to complete setup (FREE). The setup fee is only required in step 4 when you're ready to unlock premium features like KYC verification, vault deployment, and full access to all ChainGuard modules. You can explore and participate in the community for free until you're ready to complete your setup.

What can I do with ChainGuard Identity before paying?

Before paying the setup fee, you can: 1) Download the ChainGuard mobile app, 2) Create your profile with username and email, 3) Connect the app to your profile (wallet binding), 4) Explore your dashboard and see all available features, 5) Join our community and participate in community activities, 6) Learn about Web3 security and ChainGuard features. All of this is available at no cost. The setup fee is only required when you're ready to unlock premium features like KYC verification, vault deployment, and full access to all ChainGuard modules.

What personal information is collected during KYC verification?

During KYC verification, ChainGuard collects: Full legal name, Government-issued ID number, Proof of address document, Biometric data (if required by jurisdiction), and Date of birth. This information is submitted through the ChainGuard interface and verified by third-party KYC providers (Sumsub, Onfido, or Jumio). All data is immediately encrypted before storage, and no raw PII (Personally Identifiable Information) is ever stored in plaintext.

How does ChainGuard protect my KYC data?

ChainGuard protects your KYC data through multiple security layers: 1) Immediate encryption - All PII is encrypted using AES-256-GCM encryption before storage, 2) Hashing - KYC ID is hashed with a unique salt using keccak256(sha256(kycId || uniqueSalt)), ensuring no two users have the same hash even with identical KYC IDs, 3) Off-chain storage - Encrypted PII is stored in ChainGuard's secure off-chain database with strict access controls, 4) Audit logs - All access attempts are logged with timestamp, user ID, and purpose, 5) Compliance - Data handling is compliant with GDPR, CCPA, and other data protection regulations. No raw PII is stored on the blockchain.

What happens to my KYC data after verification?

After KYC verification: 1) Raw PII is encrypted with AES-256-GCM and stored off-chain in a secure database, 2) KYC ID is hashed with a unique salt and the hash is used for on-chain operations, 3) Only encrypted data is stored with role-based access control (RBAC), 4) Access is controlled with audit logs tracking all access attempts, 5) No raw PII is stored on the blockchain - only cryptographic proofs. Your encrypted data remains accessible for compliance and audit purposes, but cannot be accessed without proper authorization and is never shared with dApps or third parties.

What encryption algorithm does ChainGuard use for KYC data?

ChainGuard uses AES-256-GCM (Advanced Encryption Standard with 256-bit key and Galois/Counter Mode) for encrypting all personally identifiable information. This is the same encryption standard used by banks and government agencies. The KYC identifier is hashed using a two-step process: first SHA-256, then Keccak256, with a unique salt per user. The formula is: keccak256(sha256(kycId || uniqueSalt)). This ensures no two users have the same hash even with identical KYC IDs, and the hash cannot be reversed to reveal the original KYC ID.

How does the KYC ID hashing process work?

The KYC ID hashing process uses a two-step cryptographic hash: 1) First, the KYC ID is combined with a unique salt (generated per user) and hashed using SHA-256, 2) Then, the SHA-256 result is hashed again using Keccak256 (the same hash function used by Ethereum). The formula is: keccak256(sha256(kycId || uniqueSalt)). The salt is generated per user and stored securely. This double-hashing with salt ensures: No two users have the same hash even with identical KYC IDs, the hash cannot be reversed to reveal the original KYC ID, and the process is cryptographically secure and irreversible.

Where is my encrypted KYC data stored?

Your encrypted KYC data is stored in ChainGuard's secure off-chain database with: 1) Encrypted database with role-based access control (RBAC) ensuring only authorized personnel can access data, 2) Audit logs tracking all access attempts with timestamp, user ID, and purpose, 3) Compliance with GDPR, CCPA, and other data protection regulations, 4) Data encrypted at rest and in transit, 5) Access controlled with strict security protocols. No raw PII is stored on the blockchain - only encrypted data is stored off-chain, and only cryptographic proofs (hashes) are stored on-chain for verification purposes.

Can I access my stored KYC data?

Yes, you can access your KYC verification status and related information through your ChainGuard dashboard. However, for security and privacy reasons, raw PII (Personally Identifiable Information) is not displayed directly. You can view: 1) KYC verification status and level, 2) Verification date and expiration, 3) KYC ID hash (cryptographic proof), 4) Linked wallet addresses, 5) Vault addresses associated with your identity. If you need to update your KYC information or request data deletion, you can contact support. All data access is logged for audit purposes.

What is a combined hash in ChainGuard Identity?

A combined hash is a cryptographic proof that links your verified identity to your wallet address. It's computed by concatenating multiple identifiers: your hashed KYC ID, user wallet address, ChainGuard account address, vault ID, a unique nonce, and timestamp. The formula is: keccak256(kycIdHash || userAddress || chainGuardAddr || vaultId || nonce || timestamp). This creates a unique, immutable link between your verified identity and wallet address. The nonce prevents replay attacks, and the timestamp ensures freshness. This combined hash is then signed by the Guardian service to create an attestation.

What is Guardian Attestation and how does it work?

Guardian Attestation is a cryptographic proof that ChainGuard has verified your KYC and attests to the linkage between your identity and wallet. The process: 1) A combined hash is computed from your KYC ID hash, wallet address, ChainGuard address, vault ID, nonce, and timestamp, 2) The Guardian service (running on secure infrastructure) signs the combined hash using its private key stored in a Hardware Security Module (HSM), 3) The signature uses ECDSA with secp256k1 curve following EIP-191 standard, 4) The signature proves that ChainGuard has verified your KYC and attests to the identity-wallet linkage, 5) The signature can be verified on-chain using the Guardian's public key. The private key never leaves the HSM, ensuring maximum security.

What data is stored on-chain vs off-chain?

On-chain data (stored on blockchain): Combined hash (cryptographic proof linking identity to wallet), Guardian signature (ECDSA signature proving KYC verification), Timestamp (when attestation was created), Nonce (prevents replay attacks), and Vault ID (associated vault address). Off-chain data (stored in secure database): Encrypted PII (all personal information encrypted with AES-256-GCM), KYC documents (original verification documents), Access logs (audit trail of data access), and User profile data (account settings, preferences). This separation ensures: Privacy (no PII on public blockchain), Security (encrypted data in controlled environment), Auditability (on-chain proofs are immutable), and Compliance (meets data protection regulations).

How does ChainGuard Identity integrate with the vault?

ChainGuard Identity integrates with the vault through on-chain attestation: 1) The vault smart contract verifies the attestation before allowing sensitive operations, 2) It checks that the Guardian signature is valid using the Guardian's public key, 3) It verifies that the attestation links the correct wallet to the verified identity, 4) It ensures the attestation is not expired, 5) Operations require both wallet signature and valid attestation proof. This enables: Regulatory compliance (MiCA, Travel Rule), Identity verification for DeFi protocols, KYC requirements for exchanges, and Secure operations requiring both wallet signature and valid attestation proof. The vault uses the attestation hash to verify operations, creating a secure link between your identity and vault activities.

What are the use cases for ChainGuard Identity attestation?

ChainGuard Identity attestation enables: 1) Regulatory compliance - Meets MiCA (Markets in Crypto-Assets) and Travel Rule requirements for identity verification, 2) Travel Rule compliance - Provides verified identity for cross-border transactions, 3) Identity verification for DeFi protocols - dApps can verify your KYC status without accessing your personal data, 4) KYC requirements for exchanges - Exchanges can verify your identity status through ChainGuard attestation, 5) Enterprise integrations - Businesses can verify user identity for compliant operations, 6) Audit and reporting - Immutable on-chain records for compliance and auditing. The attestation provides proof of identity without revealing personal information, creating a privacy-preserving compliance solution.

How long is my KYC verification valid?

Your KYC verification is valid for one year from the date of verification. When you finalize your ChainGuard account, KYC verification is included in your one-time setup fee and remains valid for one year. After one year, you'll need to renew your KYC verification to maintain full access to all features. The renewal process is similar to the initial verification and may have reduced fees. Your ChainGuard Identity, wallet bindings, and vault remain active during the renewal process. You'll receive notifications before your KYC expires to ensure continuous service.

Can I view my attestation on the blockchain?

Yes! All attestations are stored on-chain and can be viewed on blockchain explorers. When an attestation is created, you receive a transaction hash that can be viewed on: Basescan.org (for Base network), Etherscan.io (for Ethereum mainnet), or the appropriate explorer for your network. The on-chain record shows: Combined hash, Guardian signature, Timestamp, Nonce, and Vault ID. This provides complete transparency and auditability. You can also view your attestation status in your ChainGuard dashboard, which provides a user-friendly interface to all your identity and attestation information.

What is ChainGuard Identity?

ChainGuard Identity is a unified Web3 identity system that creates a cryptographically verifiable link between your KYC-verified ChainGuard account, your physical ChainGuard mobile app (airgapped 2FA device), and your wallet addresses. This three-way binding ensures that vault operations require proof of ownership from both your wallet and your ChainGuard app, providing enterprise-grade security for Web3 asset management.

How does ChainGuard Identity work?

ChainGuard Identity combines four key components: 1) KYC verification through third-party providers (Sumsub, Onfido, Jumio) linked to your ChainGuard account, 2) Vault creation using factory/clone pattern (EIP-1167) for cost-efficient deployment, 3) Wallet binding through dual signature verification (wallet signature + ChainGuard app signature), 4) On-chain validation that records all identity linkages immutably on the blockchain. This creates a unified identity that works across all ChainGuard products and dApps.

What is KYC verification and why do I need it?

KYC (Know Your Customer) verification is a compliance process that verifies your identity through document checks. ChainGuard integrates with leading KYC providers (Sumsub, Onfido, Jumio) at a cost of $1.50-$5.00 per user (average $2.50). KYC provides the foundation for enterprise-grade security and compliance, creating a trusted identity that works across all ChainGuard products and can be used for compliant transactions, regulatory reporting, and enterprise integrations.

How does vault creation work?

ChainGuard uses the EIP-1167 minimal proxy pattern to deploy vaults efficiently. A factory contract is deployed once per blockchain network, and each user's vault is created as a minimal proxy clone pointing to the implementation contract. This dramatically reduces deployment costs (Base: ~$1.00, Multi-chain: ~$7.50 vs. $200+ for full deployments) while maintaining full security and functionality. The vault is initialized with your three-address configuration (Primary, 2FA, Secondary) and linked to your KYC-verified ChainGuard account identity.

What is wallet binding?

Wallet binding creates a cryptographically verifiable link between your wallet address and your ChainGuard account. This process requires signatures from both your wallet (MetaMask, etc.) and your ChainGuard mobile app, proving that you own both devices. The binding process: 1) System generates QR code with unique nonce, 2) You sign binding message with your wallet, 3) You scan QR code with ChainGuard app which signs the message, 4) Both signatures are verified on-chain using ECDSA recovery, 5) Wallet is linked to your ChainGuard identity in your user profile.

Why do I need to bind my wallet?

Wallet binding is the critical link that connects your verified ChainGuard identity to your wallet addresses. This creates a three-way binding: your KYC-verified account, your ChainGuard app (2FA device), and your wallet. This binding is essential for vault operations and provides enterprise-grade security by ensuring that vault operations require validated wallet binding, preventing unauthorized access. It also creates a unified identity that works across all ChainGuard products and dApps.

What is on-chain validation?

On-chain validation ensures that all identity linkages are cryptographically verified and permanently recorded on the blockchain. The process includes: 1) Message construction with action type, sessionId, timestamp, nonce, and wallet address, 2) Signature recovery using ECDSA to verify both wallet and ChainGuard app signatures, 3) Session validation to ensure active authenticated session exists, 4) Profile update storing wallet binding in user profile, 5) Vault linkage requiring validated wallet binding for all vault operations. This creates an immutable audit trail that cannot be tampered with.

How secure is ChainGuard Identity?

ChainGuard Identity provides enterprise-grade security through multiple layers: 1) KYC verification ensures verified identity foundation, 2) Dual signature requirement (wallet + ChainGuard app) proves ownership of both devices, 3) On-chain validation creates immutable cryptographic proof of identity linkage, 4) Three-address protocol requires multiple approvals for vault operations, 5) Airgapped mobile app operates offline for maximum security, 6) All validations recorded on blockchain preventing tampering. This combination provides institutional-level security for Web3 asset management.

Can I use ChainGuard Identity with multiple wallets?

Yes! You can bind multiple wallets to your ChainGuard Identity. Each wallet binding follows the same dual signature verification process (wallet signature + ChainGuard app signature). You can designate one wallet as your primary address and others as fallback addresses. All bound wallets are linked to your KYC-verified ChainGuard account identity and can be used for vault operations. This allows you to manage multiple wallets while maintaining a unified identity across all of them.

What happens if I lose access to my ChainGuard mobile app?

If you lose access to your ChainGuard mobile app, you can recover access through the three-address recovery system. Any two of your three addresses (Primary wallet, ChainGuard app address, Secondary address) can recover the third after a security cooldown period (24 hours). This ensures you never lose access to your assets while maintaining maximum security. The recovery process requires on-chain validation and follows the same security protocols as regular operations.

How does ChainGuard Identity work with other ChainGuard products?

ChainGuard Identity is the foundation that connects all ChainGuard products: 1) ChainGuard Vault uses your identity for multi-signature protection, 2) ChainGuard OAuth uses your identity for dApp authentication, 3) ChainGuard Mobile App uses your identity for 2FA signatures, 4) All products share the same KYC-verified account and wallet bindings. This creates a seamless, secure experience across the entire ChainGuard ecosystem - one verified identity works everywhere.

Is my identity information stored on the blockchain?

KYC verification data is processed by third-party providers (Sumsub, Onfido, Jumio) and linked to your ChainGuard account. The blockchain stores: 1) Cryptographic proof of identity linkage (signatures, addresses), 2) Wallet binding records, 3) Vault deployment addresses, 4) Transaction history. Personal KYC documents are not stored on-chain - only the verification status and cryptographic proofs are recorded. This provides privacy while maintaining the security benefits of on-chain validation.

How long does the identity setup process take?

The ChainGuard Identity setup process typically takes 15-30 minutes: 1) Account creation and setup fee payment (5 minutes), 2) KYC verification (10-20 minutes depending on provider response time), 3) Vault deployment (automatic, 1-2 minutes), 4) Wallet binding (5-10 minutes including QR code scanning and signatures). The entire process is guided and can be completed in one session. KYC verification may take longer if additional documentation is required.

Can I use ChainGuard Identity for enterprise compliance?

Yes! ChainGuard Identity is designed for enterprise compliance: 1) KYC verification meets regulatory requirements for institutional use, 2) On-chain validation provides immutable audit trail for compliance and auditing, 3) Complete transaction history with full traceability, 4) Transparent actions that are verifiable and traceable, 5) Real-time compliance monitoring and reporting. The system meets regulatory standards for institutional use and provides the foundation for compliant Web3 operations.

What is the factory/clone pattern and why does it matter?

The factory/clone pattern (EIP-1167) is a smart contract deployment optimization. Instead of deploying a full vault contract for each user (costing $50-$200+), a factory contract is deployed once per network, and each user's vault is created as a minimal proxy clone. This reduces deployment costs by 70-90% (Base: ~$1.00 vs. $50+, Multi-chain: ~$7.50 vs. $200+) while maintaining identical security and functionality. The pattern is industry-standard and used by major DeFi protocols for cost-efficient contract deployment.

ChainGuard Identity

KYC-Verifizierung, Tresorerstellung & Wallet-Bindung mit On-Chain-Validierung

ChainGuard Identity verbindet dein KYC-verifiziertes ChainGuard-Konto, deine physische Mobile App (airgapped 2FA-Gerät) und deine Wallet-Adressen durch kryptografisch überprüfbare Nachweise. Sobald du dein ChainGuard-Konto finalisierst, ist die KYC-Verifizierung in der einmaligen Einrichtungsgebühr enthalten und bleibt ein Jahr gültig. Diese Drei-Wege-Bindung stellt sicher, dass Tresor-Operationen immer einen Besitznachweis sowohl deiner Wallet als auch deiner ChainGuard App benötigen – für Enterprise-Grade-Sicherheit im Web3.

Im Gegensatz zu traditionellen Web3-Identitätslösungen, die aus voneinander losgelösten Diensten bestehen, vereint ChainGuard Identity KYC-Verifizierung, Tresorbereitstellung und Wallet-Bindung in einem einzigen, nahtlosen System. Jeder Baustein wird on-chain validiert und erzeugt einen unveränderlichen Identitätsnachweis, der in allen ChainGuard-Produkten und dApps funktioniert.

Jetzt starten Mehr erfahren

Heb mich an

ChainGuard App

99.9%

Betriebszeit-Garantie

3-Way

Sicherheitsbindung

On-Chain

Unveränderlicher Nachweis

1 Year

KYC-Gültigkeit

Sicherheit & Compliance

Enterprise-Sicherheitsstandards und regulatorische Konformität

KYC-Integration

Drittanbieter-Identitätsprüfung direkt in deinem ChainGuard-Konto integriert

So funktioniert KYC

Wenn du dein ChainGuard-Konto finalisierst, ist die KYC-Verifizierung in deiner einmaligen Einrichtungsgebühr enthalten. ChainGuard integriert führende KYC-Anbieter (Sumsub, Onfido, Jumio), um deine Identität per Dokumentenprüfung und Compliance-Checks zu bestätigen. Diese Verifizierung ist dauerhaft mit deinem ChainGuard-Konto verknüpft und bleibt ein Jahr gültig – die Grundlage für all deine Web3-Interaktionen.

Drittanbieter-Verifizierung (Sumsub, Onfido, Jumio)

Dokumentenprüfung & Compliance-Checks

In Einrichtungsgebühr enthalten – Keine Zusatzkosten (KYC-Kosten: 1,50 $ – 5,00 $ pro Nutzer, Schnitt 2,50 $)

Ein Jahr gültig – KYC bleibt 12 Monate ab Konto-Erstellung aktiv

Mit ChainGuard-Kontidentität verknüpft

Compliance-ready für Enterprise-Einsatz

Warum KYC wichtig ist

KYC-Verifizierung bildet die Grundlage für Enterprise-Sicherheit und Compliance. Durch die Verknüpfung der verifizierten Identität mit deinem ChainGuard-Konto entsteht ein vertrauenswürdiges Profil, das in allen ChainGuard-Produkten genutzt werden kann – für konforme Transaktionen, regulatorisches Reporting und Enterprise-Integrationen.

Nachgewiesene Identität

Verifizierte Identität, die deinem ChainGuard-Konto zugeordnet ist

Enterprise-Compliance

Erfüllt regulatorische Anforderungen für institutionelle Nutzung

Vereinheitlichte Identität

Eine verifizierte Identität funktioniert in allen ChainGuard-Produkten

Tresorerstellung & Bereitstellung

On-Chain-Tresorbereitstellung über Factory/Clone-Pattern für sichere, kosteneffiziente Implementierung

Factory/Clone-Pattern (EIP-1167)

ChainGuard nutzt das EIP-1167-Minimal-Proxy-Pattern, um Tresore effizient zu deployen. Ein Factory-Contract wird pro Blockchain einmal bereitgestellt; jeder Nutzertresor ist ein Minimal-Proxy-Clone, der auf den Implementierungsvertrag zeigt. So sinken die Deploy-Kosten drastisch bei voller Sicherheit und Funktionalität.

On-Chain-Bereitstellung

Tresor wird über den VaultFactory-Smart-Contract deployt

Multi-Signature-Smart-Contract

Drei-Adress-Sicherheitsprotokoll in jedem Tresor integriert

Drei-Adress-Protokoll

Primär-, 2FA- und Sekundäradresse für maximale Sicherheit

Kosteneffiziente Bereitstellung

Minimal-Proxy reduziert Deployment-Kosten um 70–90 % gegenüber Vollverträgen

So funktioniert die Tresorerstellung

1
Bereitstellung des Factory-Contracts
VaultFactory wird pro Netzwerk einmal deployt (Kosten im Infrastruktur-Budget enthalten)
2
Minimal-Proxy-Erstellung
Jeder Tresor ist ein EIP-1167-Minimal-Proxy-Clone, der auf die Implementierung verweist
3
Drei-Adress-Konfiguration
Initialisierung mit Primäradresse, 2FA-Adresse (ChainGuard App) und Sekundäradresse
4
Identitätsverknüpfung
Tresoradresse wird im Nutzerprofil mit deiner KYC-verifizierten Identität verbunden

Wallet-Bindung & Besitznachweis

Beweise den Besitz deiner ChainGuard App und deiner Wallet durch Dual-Signature-Verifizierung

So funktioniert die Wallet-Bindung

Wallet-Bindung erzeugt einen kryptografisch prüfbaren Link zwischen deiner Wallet-Adresse und deinem ChainGuard-Konto. Dafür sind Signaturen deiner Wallet (MetaMask etc.) und deiner ChainGuard Mobile App erforderlich. Die Dual-Verifizierung wird on-chain bestätigt und erzeugt einen unveränderlichen Nachweis.

1. QR-Code-Erstellung

System erstellt eine Bindungs-Session mit eindeutiger Nonce. Ein QR-Code mit Wallet-Adresse und Session-Metadaten wird generiert.

2. Wallet-Signatur

Du signierst eine Bindungsnachricht mit deiner Wallet (MetaMask, WalletConnect etc.) und weist damit den Besitz nach.

3. ChainGuard-App-Signatur

Du scannst den QR-Code mit der ChainGuard App. Die App signiert die Nachricht mit dem Konto-Schlüssel und beweist den Besitz des 2FA-Geräts.

4. Doppelter Nachweis

Beide Signaturen werden on-chain via ECDSA-Recovery geprüft; die recovered Adressen müssen zur Wallet und zum ChainGuard-Konto passen.

5. Bindung abgeschlossen

Die Wallet wird als primäre oder Fallback-Adresse im Profil gespeichert; alle Tresor-Operationen verlangen jetzt eine validierte Bindung.

Warum Wallet-Bindung wichtig ist

Wallet-Bindung ist das verbindende Element zwischen deiner verifizierten ChainGuard-Identität und deinen Wallet-Adressen. Sie schafft die Drei-Wege-Bindung (KYC-Konto, ChainGuard App, Wallet) und ist essenziell für Tresor-Operationen sowie Enterprise-Sicherheit.

Nachgewiesener Besitz

Doppelte Signaturen belegen Besitz von ChainGuard App und Wallet-Gerät

On-Chain-Sicherheit

Alle Prüfungen werden auf der Blockchain festgehalten – unveränderlicher Nachweis

Vereinheitlichte Identität

Eine KYC-verifizierte Identität funktioniert in allen ChainGuard-Produkten und dApps

Tresor-Sicherheit

Tresor-Operationen verlangen validierte Wallet-Bindung und verhindern unbefugten Zugriff

On-Chain-Validierungsprozess

Jede Identitätsverknüpfung wird auf der Blockchain geprüft und gespeichert – für unveränderliche Sicherheit

Validierungsprozess

On-Chain-Validierung stellt sicher, dass alle Identitätsverknüpfungen kryptografisch geprüft und permanent auf der Blockchain gespeichert werden. Das schafft einen unveränderlichen Audit-Trail und verhindert Manipulation.

Nachrichtenaufbau

JSON-Struktur mit Aktionstyp (Wallet-Bindung), SessionId, Zeitstempel, Nonce und Wallet-Adresse wird erstellt – diese Nachricht wird von Wallet und ChainGuard App signiert.

Signatur-Recovery

Beide Signaturen werden per ECDSA-Recovery überprüft; die wiederhergestellten Public Keys müssen zu den erwarteten Adressen passen.

Sitzungsvalidierung

System prüft, ob eine aktive authentifizierte Session existiert. Nur so findet die Bindung im Kontext eines gültigen ChainGuard-Kontos statt.

Profil-Update

Die Wallet-Bindung wird als primäre oder Fallback-Adresse im Nutzerprofil gespeichert und mit der KYC-Identität verknüpft.

Tresor-Verknüpfung

Tresor-Operationen verlangen nun validierte Wallet-Bindung. Der Smart-Contract akzeptiert nur Aktionen von gebundenen Adressen und erfordert die ChainGuard-App-Signatur.

Warum On-Chain-Validierung wichtig ist

On-Chain-Validierung ist das kryptografische Fundament von ChainGuard Identity. Durch die Speicherung aller Bindungen auf der Blockchain entsteht ein unveränderlicher, überprüfbarer Nachweis – essenziell für Enterprise-Sicherheit, Compliance und Vertrauen.

Unveränderlicher Datensatz

Alle Verknüpfungen werden dauerhaft on-chain protokolliert

Kryptografischer Beweis

ECDSA-Signaturprüfung stellt Authentizität sicher

Volle Auditierbarkeit

Kompletter Transaktionsverlauf für Compliance und Prüfungen

Manipulationssicher

Blockchain-Immutabilität verhindert Identitätsbetrug

ChainGuard vs. traditionelle Lösungen

Warum ChainGuard Identity die bessere Wahl für Web3-Identitätsmanagement ist

Funktion	Traditionelle Lösungen	ChainGuard Identity
Identitätsprüfung	Getrennte Dienste	Vereinheitlichtes System
On-Chain-Validierung	Begrenzt oder nicht vorhanden	Komplett on-chain
Drei-Wege-Bindung	Nicht verfügbar	KYC + App + Wallet
Tresor-Integration	Separates Setup	Im Setup enthalten
Plattformübergreifend	Plattformspezifisch	Funktioniert überall
Kosteneffizienz	Mehrere Gebühren	Einmaliges Setup

Drei-Wege-Bindungsprozess

Visualisierung, wie deine Identitätsbausteine kryptografisch verknüpft werden

KYC-Konto

Verifizierte Identität

ChainGuard App

2FA-Gerät

Wallet-Adresse

On-Chain-Bindung

Alle drei Komponenten sind durch On-Chain-Validierung kryptografisch verbunden. Für jede Tresor-Operation sind Signaturen deiner Wallet und deiner ChainGuard App erforderlich – so entsteht ein unveränderlicher Identitätsnachweis.

Einfacher Einrichtungsprozess

In wenigen Schritten zu deiner ChainGuard Identity

Praxisnahe Anwendungsfälle

So ermöglicht ChainGuard Identity sichere Web3-Interaktionen in jeder Branche

Enterprise-Compliance

Erfülle regulatorische Vorgaben für institutionellen Handel, DeFi-Operationen und grenzüberschreitende Transaktionen. Vollständiger Audit-Trail und KYC-Nachweis für Unternehmenskunden.

Zugang zu DeFi-Plattformen

Nutze hochvolumige DeFi-Protokolle mit verifizierter Identität. Plattformen können deinem KYC-Status vertrauen, während du die volle Kontrolle über deine Daten behältst.

NFT-Marktplatz

Handle hochpreisige NFTs mit verifizierter Identität. Marktplätze sehen deinen KYC-Status, während du steuerst, welche Informationen geteilt werden.

Warum ChainGuard Identity zählt

Das technische Fundament für Web3-Sicherheit und Compliance auf Enterprise-Niveau

Die Zukunft der Web3-Konnektivität: Genehmigungen verhandeln statt blind gewähren

Das bisherige Paradigma betrachtet Zugang als Einbahnstraße: „User fragt, Plattform gewährt.“ Dieses Modell ist überholt. Regulierungen wie MiCA, Travel Rule und Wallet-Bindungsanforderungen verändern die Interaktion zwischen Plattform und Nutzer grundlegend. Zukünftig dürfen Plattformen Nutzer nicht mehr ohne verifizierte Identitätsdaten und explizite Zustimmung anbinden.

Unter den neuen Rahmenwerken müssen Plattformen wissen, welche Daten sie erhalten, wer sie liefert und zu welchem Zweck. Gleichzeitig verlangen Nutzer Transparenz und Kontrolle. Die Zukunft besteht aus zweiseitigen Permission-Flows mit vollständiger Nachvollziehbarkeit. Systeme, die diese verhandelten Zugriffe und Audits ermöglichen, definieren den neuen Standard digitaler Vertrauenswürdigkeit.

ChainGuard Identity liefert diese entscheidende Ebene in einer Lösung: Wir verhandeln die Bedingungen mit der Plattform, du bestätigst und verbindest dich. Eine Identität, eine Oberfläche, ein einheitlicher Ablauf. „Keine externen Wallet-Freigaben nötig“ – verbinde dich einfach mit deinem ChainGuard-Konto und teile nur die Daten, die benötigt werden. So behältst du die Kontrolle, während Plattformen regulatorische Erwartungen erfüllen.

Sicherheit auf Enterprise-Niveau

Das Identity-System erstellt eine kryptografisch verifizierbare Verbindung zwischen deinem KYC-Konto, der ChainGuard App (2FA-Gerät) und deinen Wallet-Adressen. Tresor-Operationen verlangen damit stets Nachweise beider Seiten und liefern Enterprise-Sicherheit für die Verwaltung digitaler Werte.

Regulatorische Compliance

Eine an KYC gekoppelte On-Chain-Identität erzeugt ein Compliance-fähiges System für Enterprise-Nutzung. Alle Transaktionen werden transparent on-chain geloggt und bieten maximale Auditierbarkeit bei höchster Sicherheit – ein Fundament für konforme Web3-Prozesse.

Vereinheitlichte Web3-Identität

Eine verifizierte Identität funktioniert in sämtlichen ChainGuard-Produkten und dApps. KYC-Konto, Tresor, Wallet-Bindungen und Mobile App sind on-chain verknüpft und bieten eine nahtlose, sichere User Journey ohne fragmentierte Identitätsinseln.

Unveränderlicher Audit-Trail

Jede Identitätsverknüpfung wird auf der Blockchain gespeichert – unveränderlich und prüfbar. Dadurch entstehen vollständige Nachweise für Compliance, Audits und Vertrauensaufbau – bei gleichzeitig höchster Transparenz.

Was Nutzer sagen

Vertrauenswürdig für Web3-Nutzer und Unternehmen weltweit

Technischer Deep Dive

Klappe die Karten auf, um mehr über die technische Umsetzung zu erfahren

ECDSA-Signaturprüfung

So verifizieren wir kryptografisch den Besitz von Wallet und App

Factory/Clone-Pattern (EIP-1167)

So deployen wir Tresore effizient mit Minimal-Proxies

Zero-Knowledge-Architektur

So schützen wir deine Privatsphäre bei voller Verifizierbarkeit

Bereit, deine Web3-Identität zu sichern?

Schließe dich Tausenden von Nutzern an, die ChainGuard Identity für Enterprise-Sicherheit, Compliance und nahtlose Web3-Konnektivität vertrauen.

Einmalige Einrichtungsgebühr inklusive KYC + erstes Jahr kostenlos

Base: 8,75 $ • Extended: 22,50 $ • 75 % Rabatt für die ersten 10.000 Nutzer

Setup starten

Mehr erfahren?

Tauche in unsere umfassende Dokumentation ein, um Technik, Sicherheitsarchitektur und Integrationsleitfäden von ChainGuard Identity kennenzulernen.

Dokumentation ansehen

ChainGuard Identity

KYC-Verifizierung, Tresorerstellung & Wallet-Bindung mit On-Chain-Validierung

Sicherheit & Compliance

KYC-Integration

So funktioniert KYC

Warum KYC wichtig ist

Nachgewiesene Identität

Enterprise-Compliance

Vereinheitlichte Identität

Tresorerstellung & Bereitstellung

Factory/Clone-Pattern (EIP-1167)

On-Chain-Bereitstellung

Multi-Signature-Smart-Contract

Drei-Adress-Protokoll

Kosteneffiziente Bereitstellung

So funktioniert die Tresorerstellung

Bereitstellung des Factory-Contracts

Minimal-Proxy-Erstellung

Drei-Adress-Konfiguration

Identitätsverknüpfung

Wallet-Bindung & Besitznachweis

So funktioniert die Wallet-Bindung

1. QR-Code-Erstellung

2. Wallet-Signatur

3. ChainGuard-App-Signatur

4. Doppelter Nachweis

5. Bindung abgeschlossen

Warum Wallet-Bindung wichtig ist

Nachgewiesener Besitz

On-Chain-Sicherheit

Vereinheitlichte Identität

Tresor-Sicherheit

On-Chain-Validierungsprozess

Validierungsprozess

Nachrichtenaufbau

Signatur-Recovery

Sitzungsvalidierung

Profil-Update

Tresor-Verknüpfung

Warum On-Chain-Validierung wichtig ist

Unveränderlicher Datensatz

Kryptografischer Beweis

Volle Auditierbarkeit

Manipulationssicher

ChainGuard vs. traditionelle Lösungen

Drei-Wege-Bindungsprozess

KYC-Konto

ChainGuard App

Wallet-Adresse

Einfacher Einrichtungsprozess

App herunterladen & Konto erstellen

Wallet-Bindung & Profil

Wähle deinen Pfad

Setup abschließen

Praxisnahe Anwendungsfälle

Enterprise-Compliance

Zugang zu DeFi-Plattformen

NFT-Marktplatz

Warum ChainGuard Identity zählt

Die Zukunft der Web3-Konnektivität: Genehmigungen verhandeln statt blind gewähren

Sicherheit auf Enterprise-Niveau

Regulatorische Compliance

Vereinheitlichte Web3-Identität

Unveränderlicher Audit-Trail

Was Nutzer sagen

Technischer Deep Dive

ECDSA-Signaturprüfung

Factory/Clone-Pattern (EIP-1167)

Zero-Knowledge-Architektur

Bereit, deine Web3-Identität zu sichern?

Mehr erfahren?