What is ChainGuard Identity?

ChainGuard Identity is a unified Web3 identity system that creates a cryptographically verifiable link between your KYC-verified ChainGuard account, your physical ChainGuard mobile app (airgapped 2FA device), and your wallet addresses. This three-way binding ensures that vault operations require proof of ownership from both your wallet and your ChainGuard app, providing enterprise-grade security for Web3 asset management.

How does ChainGuard Identity work?

ChainGuard Identity combines four key components: 1) KYC verification through third-party providers (Sumsub, Onfido, Jumio) linked to your ChainGuard account, 2) Vault creation using factory/clone pattern (EIP-1167) for cost-efficient deployment, 3) Wallet binding through dual signature verification (wallet signature + ChainGuard app signature), 4) On-chain validation that records all identity linkages immutably on the blockchain. This creates a unified identity that works across all ChainGuard products and dApps.

What is KYC verification and why do I need it?

KYC (Know Your Customer) verification is a compliance process that verifies your identity through document checks. ChainGuard integrates with leading KYC providers (Sumsub, Onfido, Jumio) at a cost of $1.50-$5.00 per user (average $2.50). KYC provides the foundation for enterprise-grade security and compliance, creating a trusted identity that works across all ChainGuard products and can be used for compliant transactions, regulatory reporting, and enterprise integrations.

How does vault creation work?

ChainGuard uses the EIP-1167 minimal proxy pattern to deploy vaults efficiently. A factory contract is deployed once per blockchain network, and each user's vault is created as a minimal proxy clone pointing to the implementation contract. This dramatically reduces deployment costs (Base: ~$1.00, Multi-chain: ~$7.50 vs. $200+ for full deployments) while maintaining full security and functionality. The vault is initialized with your three-address configuration (Primary, 2FA, Secondary) and linked to your KYC-verified ChainGuard account identity.

What is wallet binding?

Wallet binding creates a cryptographically verifiable link between your wallet address and your ChainGuard account. This process requires signatures from both your wallet (MetaMask, etc.) and your ChainGuard mobile app, proving that you own both devices. The binding process: 1) System generates QR code with unique nonce, 2) You sign binding message with your wallet, 3) You scan QR code with ChainGuard app which signs the message, 4) Both signatures are verified on-chain using ECDSA recovery, 5) Wallet is linked to your ChainGuard identity in your user profile.

Why do I need to bind my wallet?

Wallet binding is the critical link that connects your verified ChainGuard identity to your wallet addresses. This creates a three-way binding: your KYC-verified account, your ChainGuard app (2FA device), and your wallet. This binding is essential for vault operations and provides enterprise-grade security by ensuring that vault operations require validated wallet binding, preventing unauthorized access. It also creates a unified identity that works across all ChainGuard products and dApps.

What is on-chain validation?

On-chain validation ensures that all identity linkages are cryptographically verified and permanently recorded on the blockchain. The process includes: 1) Message construction with action type, sessionId, timestamp, nonce, and wallet address, 2) Signature recovery using ECDSA to verify both wallet and ChainGuard app signatures, 3) Session validation to ensure active authenticated session exists, 4) Profile update storing wallet binding in user profile, 5) Vault linkage requiring validated wallet binding for all vault operations. This creates an immutable audit trail that cannot be tampered with.

How secure is ChainGuard Identity?

ChainGuard Identity provides enterprise-grade security through multiple layers: 1) KYC verification ensures verified identity foundation, 2) Dual signature requirement (wallet + ChainGuard app) proves ownership of both devices, 3) On-chain validation creates immutable cryptographic proof of identity linkage, 4) Three-address protocol requires multiple approvals for vault operations, 5) Airgapped mobile app operates offline for maximum security, 6) All validations recorded on blockchain preventing tampering. This combination provides institutional-level security for Web3 asset management.

Can I use ChainGuard Identity with multiple wallets?

Yes! You can bind multiple wallets to your ChainGuard Identity. Each wallet binding follows the same dual signature verification process (wallet signature + ChainGuard app signature). You can designate one wallet as your primary address and others as fallback addresses. All bound wallets are linked to your KYC-verified ChainGuard account identity and can be used for vault operations. This allows you to manage multiple wallets while maintaining a unified identity across all of them.

What happens if I lose access to my ChainGuard mobile app?

If you lose access to your ChainGuard mobile app, you can recover access through the three-address recovery system. Any two of your three addresses (Primary wallet, ChainGuard app address, Secondary address) can recover the third after a security cooldown period (24 hours). This ensures you never lose access to your assets while maintaining maximum security. The recovery process requires on-chain validation and follows the same security protocols as regular operations.

How does ChainGuard Identity work with other ChainGuard products?

ChainGuard Identity is the foundation that connects all ChainGuard products: 1) ChainGuard Vault uses your identity for multi-signature protection, 2) ChainGuard OAuth uses your identity for dApp authentication, 3) ChainGuard Mobile App uses your identity for 2FA signatures, 4) All products share the same KYC-verified account and wallet bindings. This creates a seamless, secure experience across the entire ChainGuard ecosystem - one verified identity works everywhere.

Is my identity information stored on the blockchain?

KYC verification data is processed by third-party providers (Sumsub, Onfido, Jumio) and linked to your ChainGuard account. The blockchain stores: 1) Cryptographic proof of identity linkage (signatures, addresses), 2) Wallet binding records, 3) Vault deployment addresses, 4) Transaction history. Personal KYC documents are not stored on-chain - only the verification status and cryptographic proofs are recorded. This provides privacy while maintaining the security benefits of on-chain validation.

How long does the identity setup process take?

The ChainGuard Identity setup process typically takes 15-30 minutes: 1) Account creation and setup fee payment (5 minutes), 2) KYC verification (10-20 minutes depending on provider response time), 3) Vault deployment (automatic, 1-2 minutes), 4) Wallet binding (5-10 minutes including QR code scanning and signatures). The entire process is guided and can be completed in one session. KYC verification may take longer if additional documentation is required.

Can I use ChainGuard Identity for enterprise compliance?

Yes! ChainGuard Identity is designed for enterprise compliance: 1) KYC verification meets regulatory requirements for institutional use, 2) On-chain validation provides immutable audit trail for compliance and auditing, 3) Complete transaction history with full traceability, 4) Transparent actions that are verifiable and traceable, 5) Real-time compliance monitoring and reporting. The system meets regulatory standards for institutional use and provides the foundation for compliant Web3 operations.

What is the factory/clone pattern and why does it matter?

The factory/clone pattern (EIP-1167) is a smart contract deployment optimization. Instead of deploying a full vault contract for each user (costing $50-$200+), a factory contract is deployed once per network, and each user's vault is created as a minimal proxy clone. This reduces deployment costs by 70-90% (Base: ~$1.00 vs. $50+, Multi-chain: ~$7.50 vs. $200+) while maintaining identical security and functionality. The pattern is industry-standard and used by major DeFi protocols for cost-efficient contract deployment.

How does dual signature verification work?

Dual signature verification requires signatures from both your wallet and ChainGuard app to prove ownership of both devices. The process: 1) System creates binding message with unique nonce, 2) You sign message with your wallet (proves wallet ownership), 3) You scan QR code with ChainGuard app which signs the same message (proves app ownership), 4) Both signatures are verified on-chain using ECDSA recovery, 5) System confirms both signatures recover to correct addresses. This cryptographic proof cannot be forged - you must physically control both devices to complete the binding.

What happens if my wallet binding fails?

If wallet binding fails, the system will provide specific error messages: 1) Signature mismatch - signatures don't recover to expected addresses (check wallet connection and ChainGuard app), 2) Session expired - binding session timed out (restart binding process), 3) Invalid session - session not found or not authenticated (ensure you're logged in), 4) Network error - blockchain interaction failed (retry transaction). Most issues can be resolved by restarting the binding process. Support is available if problems persist.

Can I unbind a wallet from my ChainGuard Identity?

Yes, you can unbind wallets from your ChainGuard Identity through the dashboard. However, unbinding a wallet that is used as a primary address for vault operations may require additional security verification. The unbinding process follows the same security protocols as binding - requiring confirmation from your ChainGuard app. Unbinding a wallet does not affect your KYC-verified account identity or other bound wallets.

How does ChainGuard Identity compare to other Web3 identity solutions?

ChainGuard Identity is unique in combining: 1) KYC verification with on-chain validation (most solutions offer one or the other), 2) Unified identity across vault, OAuth, and mobile app (most solutions are fragmented), 3) Factory/clone pattern for cost-efficient vault deployment (most solutions require expensive full deployments), 4) Dual signature wallet binding with on-chain proof (most solutions use simple wallet connections), 5) Enterprise compliance features with immutable audit trail. This creates a complete identity system rather than just wallet management.

What is the cost of setting up ChainGuard Identity?

The first three steps of ChainGuard Identity setup are completely free: 1) Download app and create account (FREE), 2) Wallet binding and profile (FREE), 3) Choose your path (FREE). The setup fee is only required in step 4 when you're ready to complete setup. The one-time setup fee includes: Base Chain Setup ($8.75-$22.50 with launch discount) or Extended Multi-Chain Setup ($22.50-$56.25 with launch discount). This includes: 1) KYC verification ($1.50-$5.00), 2) Vault deployment (Base: ~$1.00, Multi-chain: ~$7.50), 3) Account setup and onboarding, 4) First year free access to all ChainGuard products. There are no additional fees for identity setup - it's all included in the initial setup fee.

Can I use ChainGuard Identity for free?

Yes! You can use ChainGuard Identity for free in the first three steps: 1) Download the app and create your account (FREE), 2) Connect the app to your profile for wallet binding (FREE), 3) Choose your path - stick around for free and join the community, or proceed to complete setup (FREE). The setup fee is only required in step 4 when you're ready to unlock premium features like KYC verification, vault deployment, and full access to all ChainGuard modules. You can explore and participate in the community for free until you're ready to complete your setup.

What can I do with ChainGuard Identity before paying?

Before paying the setup fee, you can: 1) Download the ChainGuard mobile app, 2) Create your profile with username and email, 3) Connect the app to your profile (wallet binding), 4) Explore your dashboard and see all available features, 5) Join our community and participate in community activities, 6) Learn about Web3 security and ChainGuard features. All of this is available at no cost. The setup fee is only required when you're ready to unlock premium features like KYC verification, vault deployment, and full access to all ChainGuard modules.

What personal information is collected during KYC verification?

During KYC verification, ChainGuard collects: Full legal name, Government-issued ID number, Proof of address document, Biometric data (if required by jurisdiction), and Date of birth. This information is submitted through the ChainGuard interface and verified by third-party KYC providers (Sumsub, Onfido, or Jumio). All data is immediately encrypted before storage, and no raw PII (Personally Identifiable Information) is ever stored in plaintext.

How does ChainGuard protect my KYC data?

ChainGuard protects your KYC data through multiple security layers: 1) Immediate encryption - All PII is encrypted using AES-256-GCM encryption before storage, 2) Hashing - KYC ID is hashed with a unique salt using keccak256(sha256(kycId || uniqueSalt)), ensuring no two users have the same hash even with identical KYC IDs, 3) Off-chain storage - Encrypted PII is stored in ChainGuard's secure off-chain database with strict access controls, 4) Audit logs - All access attempts are logged with timestamp, user ID, and purpose, 5) Compliance - Data handling is compliant with GDPR, CCPA, and other data protection regulations. No raw PII is stored on the blockchain.

What happens to my KYC data after verification?

After KYC verification: 1) Raw PII is encrypted with AES-256-GCM and stored off-chain in a secure database, 2) KYC ID is hashed with a unique salt and the hash is used for on-chain operations, 3) Only encrypted data is stored with role-based access control (RBAC), 4) Access is controlled with audit logs tracking all access attempts, 5) No raw PII is stored on the blockchain - only cryptographic proofs. Your encrypted data remains accessible for compliance and audit purposes, but cannot be accessed without proper authorization and is never shared with dApps or third parties.

What encryption algorithm does ChainGuard use for KYC data?

ChainGuard uses AES-256-GCM (Advanced Encryption Standard with 256-bit key and Galois/Counter Mode) for encrypting all personally identifiable information. This is the same encryption standard used by banks and government agencies. The KYC identifier is hashed using a two-step process: first SHA-256, then Keccak256, with a unique salt per user. The formula is: keccak256(sha256(kycId || uniqueSalt)). This ensures no two users have the same hash even with identical KYC IDs, and the hash cannot be reversed to reveal the original KYC ID.

How does the KYC ID hashing process work?

The KYC ID hashing process uses a two-step cryptographic hash: 1) First, the KYC ID is combined with a unique salt (generated per user) and hashed using SHA-256, 2) Then, the SHA-256 result is hashed again using Keccak256 (the same hash function used by Ethereum). The formula is: keccak256(sha256(kycId || uniqueSalt)). The salt is generated per user and stored securely. This double-hashing with salt ensures: No two users have the same hash even with identical KYC IDs, the hash cannot be reversed to reveal the original KYC ID, and the process is cryptographically secure and irreversible.

Where is my encrypted KYC data stored?

Your encrypted KYC data is stored in ChainGuard's secure off-chain database with: 1) Encrypted database with role-based access control (RBAC) ensuring only authorized personnel can access data, 2) Audit logs tracking all access attempts with timestamp, user ID, and purpose, 3) Compliance with GDPR, CCPA, and other data protection regulations, 4) Data encrypted at rest and in transit, 5) Access controlled with strict security protocols. No raw PII is stored on the blockchain - only encrypted data is stored off-chain, and only cryptographic proofs (hashes) are stored on-chain for verification purposes.

Can I access my stored KYC data?

Yes, you can access your KYC verification status and related information through your ChainGuard dashboard. However, for security and privacy reasons, raw PII (Personally Identifiable Information) is not displayed directly. You can view: 1) KYC verification status and level, 2) Verification date and expiration, 3) KYC ID hash (cryptographic proof), 4) Linked wallet addresses, 5) Vault addresses associated with your identity. If you need to update your KYC information or request data deletion, you can contact support. All data access is logged for audit purposes.

What is a combined hash in ChainGuard Identity?

A combined hash is a cryptographic proof that links your verified identity to your wallet address. It's computed by concatenating multiple identifiers: your hashed KYC ID, user wallet address, ChainGuard account address, vault ID, a unique nonce, and timestamp. The formula is: keccak256(kycIdHash || userAddress || chainGuardAddr || vaultId || nonce || timestamp). This creates a unique, immutable link between your verified identity and wallet address. The nonce prevents replay attacks, and the timestamp ensures freshness. This combined hash is then signed by the Guardian service to create an attestation.

What is Guardian Attestation and how does it work?

Guardian Attestation is a cryptographic proof that ChainGuard has verified your KYC and attests to the linkage between your identity and wallet. The process: 1) A combined hash is computed from your KYC ID hash, wallet address, ChainGuard address, vault ID, nonce, and timestamp, 2) The Guardian service (running on secure infrastructure) signs the combined hash using its private key stored in a Hardware Security Module (HSM), 3) The signature uses ECDSA with secp256k1 curve following EIP-191 standard, 4) The signature proves that ChainGuard has verified your KYC and attests to the identity-wallet linkage, 5) The signature can be verified on-chain using the Guardian's public key. The private key never leaves the HSM, ensuring maximum security.

What data is stored on-chain vs off-chain?

On-chain data (stored on blockchain): Combined hash (cryptographic proof linking identity to wallet), Guardian signature (ECDSA signature proving KYC verification), Timestamp (when attestation was created), Nonce (prevents replay attacks), and Vault ID (associated vault address). Off-chain data (stored in secure database): Encrypted PII (all personal information encrypted with AES-256-GCM), KYC documents (original verification documents), Access logs (audit trail of data access), and User profile data (account settings, preferences). This separation ensures: Privacy (no PII on public blockchain), Security (encrypted data in controlled environment), Auditability (on-chain proofs are immutable), and Compliance (meets data protection regulations).

How does ChainGuard Identity integrate with the vault?

ChainGuard Identity integrates with the vault through on-chain attestation: 1) The vault smart contract verifies the attestation before allowing sensitive operations, 2) It checks that the Guardian signature is valid using the Guardian's public key, 3) It verifies that the attestation links the correct wallet to the verified identity, 4) It ensures the attestation is not expired, 5) Operations require both wallet signature and valid attestation proof. This enables: Regulatory compliance (MiCA, Travel Rule), Identity verification for DeFi protocols, KYC requirements for exchanges, and Secure operations requiring both wallet signature and valid attestation proof. The vault uses the attestation hash to verify operations, creating a secure link between your identity and vault activities.

What are the use cases for ChainGuard Identity attestation?

ChainGuard Identity attestation enables: 1) Regulatory compliance - Meets MiCA (Markets in Crypto-Assets) and Travel Rule requirements for identity verification, 2) Travel Rule compliance - Provides verified identity for cross-border transactions, 3) Identity verification for DeFi protocols - dApps can verify your KYC status without accessing your personal data, 4) KYC requirements for exchanges - Exchanges can verify your identity status through ChainGuard attestation, 5) Enterprise integrations - Businesses can verify user identity for compliant operations, 6) Audit and reporting - Immutable on-chain records for compliance and auditing. The attestation provides proof of identity without revealing personal information, creating a privacy-preserving compliance solution.

How long is my KYC verification valid?

Your KYC verification is valid for one year from the date of verification. When you finalize your ChainGuard account, KYC verification is included in your one-time setup fee and remains valid for one year. After one year, you'll need to renew your KYC verification to maintain full access to all features. The renewal process is similar to the initial verification and may have reduced fees. Your ChainGuard Identity, wallet bindings, and vault remain active during the renewal process. You'll receive notifications before your KYC expires to ensure continuous service.

Can I view my attestation on the blockchain?

Yes! All attestations are stored on-chain and can be viewed on blockchain explorers. When an attestation is created, you receive a transaction hash that can be viewed on: Basescan.org (for Base network), Etherscan.io (for Ethereum mainnet), or the appropriate explorer for your network. The on-chain record shows: Combined hash, Guardian signature, Timestamp, Nonce, and Vault ID. This provides complete transparency and auditability. You can also view your attestation status in your ChainGuard dashboard, which provides a user-friendly interface to all your identity and attestation information.

What is ChainGuard Identity?

ChainGuard Identity is a unified Web3 identity system that creates a cryptographically verifiable link between your KYC-verified ChainGuard account, your physical ChainGuard mobile app (airgapped 2FA device), and your wallet addresses. This three-way binding ensures that vault operations require proof of ownership from both your wallet and your ChainGuard app, providing enterprise-grade security for Web3 asset management.

How does ChainGuard Identity work?

ChainGuard Identity combines four key components: 1) KYC verification through third-party providers (Sumsub, Onfido, Jumio) linked to your ChainGuard account, 2) Vault creation using factory/clone pattern (EIP-1167) for cost-efficient deployment, 3) Wallet binding through dual signature verification (wallet signature + ChainGuard app signature), 4) On-chain validation that records all identity linkages immutably on the blockchain. This creates a unified identity that works across all ChainGuard products and dApps.

What is KYC verification and why do I need it?

KYC (Know Your Customer) verification is a compliance process that verifies your identity through document checks. ChainGuard integrates with leading KYC providers (Sumsub, Onfido, Jumio) at a cost of $1.50-$5.00 per user (average $2.50). KYC provides the foundation for enterprise-grade security and compliance, creating a trusted identity that works across all ChainGuard products and can be used for compliant transactions, regulatory reporting, and enterprise integrations.

How does vault creation work?

ChainGuard uses the EIP-1167 minimal proxy pattern to deploy vaults efficiently. A factory contract is deployed once per blockchain network, and each user's vault is created as a minimal proxy clone pointing to the implementation contract. This dramatically reduces deployment costs (Base: ~$1.00, Multi-chain: ~$7.50 vs. $200+ for full deployments) while maintaining full security and functionality. The vault is initialized with your three-address configuration (Primary, 2FA, Secondary) and linked to your KYC-verified ChainGuard account identity.

What is wallet binding?

Wallet binding creates a cryptographically verifiable link between your wallet address and your ChainGuard account. This process requires signatures from both your wallet (MetaMask, etc.) and your ChainGuard mobile app, proving that you own both devices. The binding process: 1) System generates QR code with unique nonce, 2) You sign binding message with your wallet, 3) You scan QR code with ChainGuard app which signs the message, 4) Both signatures are verified on-chain using ECDSA recovery, 5) Wallet is linked to your ChainGuard identity in your user profile.

Why do I need to bind my wallet?

Wallet binding is the critical link that connects your verified ChainGuard identity to your wallet addresses. This creates a three-way binding: your KYC-verified account, your ChainGuard app (2FA device), and your wallet. This binding is essential for vault operations and provides enterprise-grade security by ensuring that vault operations require validated wallet binding, preventing unauthorized access. It also creates a unified identity that works across all ChainGuard products and dApps.

What is on-chain validation?

On-chain validation ensures that all identity linkages are cryptographically verified and permanently recorded on the blockchain. The process includes: 1) Message construction with action type, sessionId, timestamp, nonce, and wallet address, 2) Signature recovery using ECDSA to verify both wallet and ChainGuard app signatures, 3) Session validation to ensure active authenticated session exists, 4) Profile update storing wallet binding in user profile, 5) Vault linkage requiring validated wallet binding for all vault operations. This creates an immutable audit trail that cannot be tampered with.

How secure is ChainGuard Identity?

ChainGuard Identity provides enterprise-grade security through multiple layers: 1) KYC verification ensures verified identity foundation, 2) Dual signature requirement (wallet + ChainGuard app) proves ownership of both devices, 3) On-chain validation creates immutable cryptographic proof of identity linkage, 4) Three-address protocol requires multiple approvals for vault operations, 5) Airgapped mobile app operates offline for maximum security, 6) All validations recorded on blockchain preventing tampering. This combination provides institutional-level security for Web3 asset management.

Can I use ChainGuard Identity with multiple wallets?

Yes! You can bind multiple wallets to your ChainGuard Identity. Each wallet binding follows the same dual signature verification process (wallet signature + ChainGuard app signature). You can designate one wallet as your primary address and others as fallback addresses. All bound wallets are linked to your KYC-verified ChainGuard account identity and can be used for vault operations. This allows you to manage multiple wallets while maintaining a unified identity across all of them.

What happens if I lose access to my ChainGuard mobile app?

If you lose access to your ChainGuard mobile app, you can recover access through the three-address recovery system. Any two of your three addresses (Primary wallet, ChainGuard app address, Secondary address) can recover the third after a security cooldown period (24 hours). This ensures you never lose access to your assets while maintaining maximum security. The recovery process requires on-chain validation and follows the same security protocols as regular operations.

How does ChainGuard Identity work with other ChainGuard products?

ChainGuard Identity is the foundation that connects all ChainGuard products: 1) ChainGuard Vault uses your identity for multi-signature protection, 2) ChainGuard OAuth uses your identity for dApp authentication, 3) ChainGuard Mobile App uses your identity for 2FA signatures, 4) All products share the same KYC-verified account and wallet bindings. This creates a seamless, secure experience across the entire ChainGuard ecosystem - one verified identity works everywhere.

Is my identity information stored on the blockchain?

KYC verification data is processed by third-party providers (Sumsub, Onfido, Jumio) and linked to your ChainGuard account. The blockchain stores: 1) Cryptographic proof of identity linkage (signatures, addresses), 2) Wallet binding records, 3) Vault deployment addresses, 4) Transaction history. Personal KYC documents are not stored on-chain - only the verification status and cryptographic proofs are recorded. This provides privacy while maintaining the security benefits of on-chain validation.

How long does the identity setup process take?

The ChainGuard Identity setup process typically takes 15-30 minutes: 1) Account creation and setup fee payment (5 minutes), 2) KYC verification (10-20 minutes depending on provider response time), 3) Vault deployment (automatic, 1-2 minutes), 4) Wallet binding (5-10 minutes including QR code scanning and signatures). The entire process is guided and can be completed in one session. KYC verification may take longer if additional documentation is required.

Can I use ChainGuard Identity for enterprise compliance?

Yes! ChainGuard Identity is designed for enterprise compliance: 1) KYC verification meets regulatory requirements for institutional use, 2) On-chain validation provides immutable audit trail for compliance and auditing, 3) Complete transaction history with full traceability, 4) Transparent actions that are verifiable and traceable, 5) Real-time compliance monitoring and reporting. The system meets regulatory standards for institutional use and provides the foundation for compliant Web3 operations.

What is the factory/clone pattern and why does it matter?

The factory/clone pattern (EIP-1167) is a smart contract deployment optimization. Instead of deploying a full vault contract for each user (costing $50-$200+), a factory contract is deployed once per network, and each user's vault is created as a minimal proxy clone. This reduces deployment costs by 70-90% (Base: ~$1.00 vs. $50+, Multi-chain: ~$7.50 vs. $200+) while maintaining identical security and functionality. The pattern is industry-standard and used by major DeFi protocols for cost-efficient contract deployment.

ChainGuard Identity

KYC 验证、金库创建和钱包绑定与链上验证

ChainGuard Identity 在您的 KYC 验证 ChainGuard 账户、物理移动应用（隔离 2FA 设备）和钱包地址之间创建加密可验证的链接。当您完成 ChainGuard 账户设置时，KYC 验证包含在您的一次性设置费用中，并保持一年有效。这种三方绑定确保金库操作需要来自您的钱包和 ChainGuard 应用的所有权证明，为 Web3 资产管理提供企业级安全性。

与依赖断开服务的传统 Web3 身份解决方案不同，ChainGuard Identity 将 KYC 验证、金库部署和钱包绑定统一到一个无缝的系统中。每个组件都在链上验证，创建不可变的身份链接证明，可在所有 ChainGuard 产品和 dApp 中工作。

开始使用了解更多

拿起我

ChainGuard App

99.9%

正常运行时间保证

3-Way

安全绑定

On-Chain

不可变证明

1 Year

KYC 有效性

安全与合规

企业级安全标准和监管合规

KYC 集成

第三方身份验证直接集成到您的 ChainGuard 账户

KYC 如何工作

当您完成 ChainGuard 账户设置时，KYC 验证包含在您的一次性设置费用中。ChainGuard 与领先的 KYC 提供商（Sumsub、Onfido、Jumio）集成，通过文档验证和合规检查来验证您的身份。此验证永久链接到您的 ChainGuard 账户，并保持一年有效，为您的所有 Web3 交互创建已验证的身份基础。

第三方验证（Sumsub、Onfido、Jumio）

文档验证和合规检查

包含在设置费用中 - 无额外费用（KYC 成本：每用户 $1.50 - $5.00，平均$ 2.50）

有效期一年 - KYC 验证从账户设置起保持 12 个月有效

链接到 ChainGuard 账户身份

为企业使用做好合规准备

为什么 KYC 很重要

KYC 验证为企业级安全和合规提供了基础。通过将已验证的身份链接到您的 ChainGuard 账户，您创建了一个可信的身份，可在所有 ChainGuard 产品中工作，并可用于合规交易、监管报告和企业集成。

已验证身份

已验证身份链接到您的 ChainGuard 账户

企业合规

满足机构使用的监管要求

统一身份

一个已验证身份可在所有ChainGuard产品中工作

金库创建与部署

使用工厂/克隆模式进行链上金库部署，实现成本效益高且安全的金库创建

工厂/克隆模式（EIP-1167）

ChainGuard 使用 EIP-1167 最小代理模式高效部署金库。每个区块链网络部署一次工厂合约，每个用户的金库都创建为指向实现合约的最小代理克隆。这大大降低了部署成本，同时保持完整的安全性和功能性。

链上部署

通过 VaultFactory 智能合约部署金库

多重签名智能合约

每个金库内置三地址安全协议

三地址协议

主地址、2FA 地址和辅助地址，提供最大安全性

成本效益高的部署

最小代理模式相比完整合约部署可降低70-90%的部署成本

金库创建如何工作

1
工厂合约部署
每个区块链网络部署一次VaultFactory合约（摊销成本包含在基础设施中）
2
最小代理创建
每个用户的金库都创建为 EIP-1167 最小代理克隆，指向实现合约
3
三地址配置
金库使用您的主地址、2FA 地址（ChainGuard 应用）和辅助地址进行初始化
4
身份链接
金库地址在您的用户配置文件中链接到您的 KYC 验证 ChainGuard 账户身份

钱包绑定与所有权验证

通过双重签名验证证明您同时拥有 ChainGuard 应用和钱包设备

钱包绑定如何工作

钱包绑定在您的钱包地址和 ChainGuard 账户之间创建加密可验证的链接。此过程需要来自您的钱包（MetaMask 等）和 ChainGuard 移动应用的双重签名，证明您拥有两个设备。然后此双重验证在链上验证，创建绑定的不可变记录。

1. 二维码生成

系统使用唯一随机数创建绑定会话。生成包含绑定请求数据的二维码，包括要绑定的钱包地址和会话元数据。

2. 钱包签名

您使用钱包（MetaMask、WalletConnect 等）签署绑定消息。此签名证明您控制正在绑定到 ChainGuard 账户的钱包地址。

3. ChainGuard 应用签名

您使用物理 ChainGuard 移动应用扫描二维码。应用使用您的 ChainGuard 账户私钥签署绑定消息，证明您拥有 ChainGuard 应用设备。

4. 双重验证

使用 ECDSA 恢复在链上验证两个签名。系统确认两个签名都恢复到正确的地址（您的钱包地址和 ChainGuard 账户地址）。

5. 绑定完成

钱包在您的用户配置文件中链接到您的 ChainGuard 身份。绑定存储为主地址或备用地址，所有金库操作现在都需要此绑定的验证。

为什么钱包绑定很重要

钱包绑定是连接您已验证 ChainGuard 身份与钱包地址的关键链接。这创建了三方绑定：您的 KYC 验证账户、ChainGuard 应用（2FA 设备）和您的钱包。此绑定对于金库操作至关重要，并提供企业级安全性。

已验证所有权

双重签名证明您同时拥有 ChainGuard 应用和钱包设备

链上安全

所有验证记录在区块链上 - 身份链接的不可变证明

统一身份

一个 KYC 验证身份可在所有 ChainGuard 产品和 dApp 中工作

金库安全

金库操作需要已验证的钱包绑定，防止未经授权的访问

链上验证过程

每个身份链接都在区块链上验证和记录，确保不可变的安全性

验证过程

链上验证确保所有身份链接都经过加密验证并永久记录在区块链上。这创建了不可变的审计跟踪，并确保任何身份绑定都无法被伪造或篡改。

消息构建

创建包含操作类型（钱包绑定）、sessionId、时间戳、随机数和钱包地址的 JSON 结构。此消息由您的钱包和 ChainGuard 应用共同签署。

签名恢复

使用 ECDSA 恢复验证两个签名。系统从签名中恢复公钥，并确认它们匹配预期地址（您的钱包地址和 ChainGuard 账户地址）。

会话验证

系统验证绑定操作是否存在活动且已认证的会话。这确保绑定在有效的 ChainGuard 账户上下文中进行。

配置文件更新

钱包绑定在您的用户配置文件中存储为主地址或备用地址。此绑定链接到您的 KYC 验证 ChainGuard 账户身份。

金库链接

金库操作现在需要已验证的钱包绑定。金库合约验证任何交易启动都来自绑定的钱包地址，并且需要 ChainGuard 应用签名才能批准。

为什么链上验证很重要

链上验证为 ChainGuard Identity 提供了加密基础。通过在区块链上记录所有身份链接，我们创建了不可变且可验证的记录，无法被篡改或伪造。这对于企业安全、监管合规和 Web3 生态系统的信任至关重要。

不可变记录

所有身份链接永久记录在区块链上

加密证明

ECDSA 签名验证确保真实性

完整可审计性

完整的交易历史用于合规和审计

防篡改

区块链的不可变性防止身份欺诈

ChainGuard vs. 传统解决方案

了解为什么 ChainGuard Identity 是 Web3 身份管理的卓越选择

功能	传统解决方案	ChainGuard Identity
身份验证	独立服务	统一系统
链上验证	有限或没有	完全链上
三方绑定	不可用	KYC + 应用 + 钱包
金库集成	独立设置	包含在设置中
跨平台	平台特定	随处可用
成本效益	多项费用	一次性设置

三方绑定过程

您的身份组件如何加密链接的可视化表示

KYC 账户

已验证身份

ChainGuard 应用

2FA 设备

钱包地址

链上绑定

三个组件通过链上验证加密链接，创建不可变的身份证明，所有金库操作都需要来自您的钱包和 ChainGuard 应用的验证。

简单设置过程

只需几个步骤即可设置您的 ChainGuard Identity

真实世界用例

了解 ChainGuard Identity 如何为各行业的安全 Web3 交互提供支持

企业合规

满足机构交易、DeFi 操作和跨境交易的监管要求。为企业客户提供完整的审计跟踪和 KYC 验证。

DeFi 平台访问

使用已验证身份访问高价值DeFi协议。平台可以信任您的KYC状态，同时您保持对数据共享的完全控制。

NFT市场

使用已验证身份交易高价值NFT。市场可以验证您的KYC状态，同时您控制共享的信息。

为什么 ChainGuard Identity 很重要

企业级Web3安全和合规的技术基础

Web3连接的未来：协商权限，而非授予访问

当前加密和技术领域的范式将访问视为单向街道，即"用户请求，平台授予"。这种模式正在变得过时。不断发展的法规，如MiCA（加密资产市场）、旅行规则和钱包绑定要求，正在从根本上改变平台和用户的交互方式。未来的平台无法在没有已验证身份数据和明确权限协商的情况下合法连接到用户。

在这些新的监管框架下，平台需要已验证的用户数据才能合法运营，而用户作为回报，必须知道正在访问哪些数据、由谁访问以及出于什么目的。未来涉及双向协商权限，这是信任、透明度和责任感的相互握手。支持双向、基于权限的访问且具有可审计透明度的系统不仅将遵守法规，还将定义数字信任的下一个标准。

ChainGuard Identity 在一个统一的解决方案中提供这一关键步骤：我们与平台协商条款，您批准并连接。一个身份，一个用户界面，一个统一的方法。"无需外部钱包批准" - 只需连接到您的 ChainGuard 账户并批准仅共享交互所需的数据。这种基于权限的模型确保您保持控制，同时平台满足监管要求，为下一代 Web3 连接奠定基础。

企业级安全

身份系统在您的 KYC 验证 ChainGuard 账户、物理移动应用（隔离 2FA 设备）和钱包地址之间创建加密可验证的链接。这种三方绑定确保金库操作需要来自您的钱包和 ChainGuard 应用的所有权证明，为 Web3 资产管理提供企业级安全性。

监管合规

链接到链上身份的 KYC 验证创建了为企业使用做好合规准备的系统。所有交易都透明地记录在链上，提供完整的可审计性，同时保持最高级别的安全性。这满足机构使用的监管要求，并为合规的 Web3 操作提供基础。

统一的 Web3 身份

一个已验证身份可在所有 ChainGuard 产品和 dApp 中工作。您的 KYC 验证账户、金库、钱包绑定和移动应用都通过链上验证链接，在整个 Web3 生态系统中创建无缝、安全的体验。不再需要管理多个身份或断开连接的服务。

不可变审计跟踪

每个身份链接都记录在区块链上，创建无法被篡改的不可变审计跟踪。这为合规、审计和信任验证提供完全透明。所有操作都是可验证和可追溯的，满足企业安全和监管合规的最高标准。

用户评价

受到全球Web3用户和企业的信任

技术深度解析

展开下面的卡片以了解更多关于我们技术实现的信息

ECDSA 签名验证

我们如何加密验证钱包和应用的所有权

工厂/克隆模式（EIP-1167）

我们如何使用最小代理克隆高效部署金库

零知识架构

我们如何在保持验证的同时保护您的隐私

准备好保护您的Web3身份了吗？

加入数千名信任 ChainGuard Identity 的用户，享受企业级安全、合规和无缝的Web3连接。

一次性设置费用包括KYC + 第一年免费

基础版：$8.75 • 扩展版：$22.50 • 前 10,000 名用户享受 75% 折扣

开始您的设置

想了解更多？

探索我们的全面文档，深入了解ChainGuard Identity的技术实现、安全架构和集成指南。

访问文档

ChainGuard Identity

KYC 验证、金库创建和钱包绑定与链上验证

安全与合规

KYC 集成

KYC 如何工作

为什么 KYC 很重要

已验证身份

企业合规

统一身份

金库创建与部署

工厂/克隆模式（EIP-1167）

链上部署

多重签名智能合约

三地址协议

成本效益高的部署

金库创建如何工作

工厂合约部署

最小代理创建

三地址配置

身份链接

钱包绑定与所有权验证

钱包绑定如何工作

1. 二维码生成

2. 钱包签名

3. ChainGuard 应用签名

4. 双重验证

5. 绑定完成

为什么钱包绑定很重要

已验证所有权

链上安全

统一身份

金库安全

链上验证过程

验证过程

消息构建

签名恢复

会话验证

配置文件更新

金库链接

为什么链上验证很重要

不可变记录

加密证明

完整可审计性

防篡改

ChainGuard vs. 传统解决方案

三方绑定过程

KYC 账户

ChainGuard 应用

钱包地址

简单设置过程

下载应用并创建账户

钱包绑定和配置文件

选择您的路径

完成设置

真实世界用例

企业合规

DeFi 平台访问

NFT市场

为什么 ChainGuard Identity 很重要

Web3连接的未来：协商权限，而非授予访问

企业级安全

监管合规

统一的 Web3 身份

不可变审计跟踪

用户评价

技术深度解析

ECDSA 签名验证

工厂/克隆模式（EIP-1167）

零知识架构

准备好保护您的Web3身份了吗？

想了解更多？