elective-stereophonic
elective-stereophonic
What is Account Control ?  
Please login or register.

Login with username, password and session length
Advanced search  

News:

Latest Stable Nxt Client: Nxt 1.12.2

Author Topic: What is Account Control ?  (Read 4937 times)

longzai1988

  • Sr. Member
  • ****
  • Karma: +44/-1
  • Offline Offline
  • Posts: 268
    • View Profile
What is Account Control ?
« on: April 03, 2014, 03:36:22 am »

The account control feature will implement a number of methods for applying limits and controls on Nxt accounts.

Features include:
  • setting a lock on an account to prohibit any outgoing transactions
  • defining a set of rules for unlocking the account

Source : http://wiki.nxtcrypto.org/wiki/Account_Control
Logged
10533725144527397164 NXT-HSBE-8PWL-CUCD-BHUD6
NXT Multigateway - http://multigateway.com/

CoinTropololis_JustaBit

  • Hero Member
  • *****
  • Karma: +144/-11
  • Offline Offline
  • Posts: 727
    • View Profile
Re: What is Account Control ?
« Reply #1 on: May 15, 2014, 10:29:58 pm »

The account control feature will implement a number of methods for applying limits and controls on Nxt accounts.

Features include:
  • setting a lock on an account to prohibit any outgoing transactions
  • defining a set of rules for unlocking the account

Source : http://wiki.nxtcrypto.org/wiki/Account_Control

Any movement on the above?

Daedelus

  • Hero Member
  • *****
  • Karma: +230/-12
  • Offline Offline
  • Posts: 3280
    • View Profile
Re: What is Account Control ?
« Reply #2 on: May 16, 2014, 01:04:44 pm »

The account control feature will implement a number of methods for applying limits and controls on Nxt accounts.

Features include:
  • setting a lock on an account to prohibit any outgoing transactions
  • defining a set of rules for unlocking the account

Source : http://wiki.nxtcrypto.org/wiki/Account_Control

Any movement on the above?

The locking bits are planned to be done with Automated Transactions, IIRC. So will have to what for that first.

Testing is coming along nicely (I'm told   :D ) ETA of the alpha/beta in 1 to 2 months. See >>>> https://nxtforum.org/automated-transactions/information-of-the-at-project/

Also, you never know if CfB may have another method up his sleeve.
Logged
NXT: NXT-4CS7-S4N5-PTH5-A8R2Q

CoinTropololis_JustaBit

  • Hero Member
  • *****
  • Karma: +144/-11
  • Offline Offline
  • Posts: 727
    • View Profile
Re: What is Account Control ?
« Reply #3 on: May 16, 2014, 01:10:34 pm »

The account control feature will implement a number of methods for applying limits and controls on Nxt accounts.

Features include:
  • setting a lock on an account to prohibit any outgoing transactions
  • defining a set of rules for unlocking the account

Source : http://wiki.nxtcrypto.org/wiki/Account_Control

Any movement on the above?

The locking bits are planned to be done with Automated Transactions, IIRC. So will have to what for that first.

Testing is coming along nicely (I'm told   :D ) ETA of the alpha/beta in 1 to 2 months. See >>>> https://nxtforum.org/automated-transactions/information-of-the-at-project/

Also, you never know if CfB may have another method up his sleeve.

Thank you.

The-Lawyer-of-NXT

  • Sr. Member
  • ****
  • Karma: +58/-4
  • Offline Offline
  • Posts: 389
    • View Profile
    • http://nxtlegal.org/
Re: What is Account Control ?
« Reply #4 on: May 28, 2014, 07:14:11 am »

Rudeboi's interesting analysis on Account Control:

"Hacking:

At the moment, security is a bit of a concern as if someone gets your passcode your funds are gone and there is no come back.
I’m really looking forward to Account Control, as this should provide enough security.

As you should be able to lock your account from making any transactions, or from sending NXT to contacts not on your safe list, from making large transactions etc.

Preferably I would like it if the AC password is never entered in full (apart from set up) so that it defeats key loggers, e.g. enter the 2nd, 5th, 7th and 10th character of the password.

Also the option for ‘locks’ to expire, as you don’t want people to set passwords then to forget them. If someone could set a lock for a period of a month (counted by blocks) then if they lose their password they are only locked out for a month, and any time during the lock they could add extra lock time e.g. another month by entering the password again (not full - only certain characters)

I don’t know if all I have wrote is technically possible, but for me it provides enough preventative measures so that secondary action by the community/developers isn’t needed.

At the moment I never log into my main Nxt account, as the risk of key loggers/man in the middle attacks is too great. Once AC is active I think many more users will have the confidence to log in more often, stay logged in and forge.
"

ChuckOne

  • Hero Member
  • *****
  • Karma: +293/-17
  • Offline Offline
  • Posts: 3450
  • ☕ NXT-4BTE-8Y4K-CDS2-6TB82
    • View Profile
Re: What is Account Control ?
« Reply #5 on: May 28, 2014, 06:05:53 pm »

Preferably I would like it if the AC password is never entered in full (apart from set up) so that it defeats key loggers, e.g. enter the 2nd, 5th, 7th and 10th character of the password.

Also the option for ‘locks’ to expire, as you don’t want people to set passwords then to forget them. If someone could set a lock for a period of a month (counted by blocks) then if they lose their password they are only locked out for a month, and any time during the lock they could add extra lock time e.g. another month by entering the password again (not full - only certain characters)

Thank you very much.

That sounds really, really interesting. :)

As well as the technical implementation will require some sort of thought.
Logged

kwilliams

  • Full Member
  • ***
  • Karma: +28/-3
  • Offline Offline
  • Posts: 226
  • NXT-FG7F-2W46-M7DE-EHPV5
    • View Profile
Re: What is Account Control ?
« Reply #6 on: June 19, 2015, 04:48:13 am »

NRS should be modified to allow creation of additional key pairs under the same account. They will derive trust from the main account (similar to SSL certificates chains) but have additional restrictions applied to them at creation. For example I should be able to create a "non-spending" keypair that is good for everything else except direct balance transfers. I would use it in my daily activities (sending messages, forging, transferring assets, etc) and even if private key becomes known, people wont be able to steal my balance directly.

Conceptually such keypairs would not be much different from aliases - they will all resolve to the same main identity but be used for different means. Each will have one or more standard policies associated to it ("Can transfer balance", "Can transfer asset", "Can forge", "Can pay network fee", etc). In addition they can have activity quotas ("max_per_block=3","max_per_day=50" which means the key can be used maximum 3 times per block and maximum 50 times per day (1440 blocks)). This is in case they get hacked, the owner will not be bled dry before he has time to revoke the keys.

The usefulness of such keys gets beyond simple security. For example I can create a "messaging only" key and give it to my marketing person to manage the communications of my account without having to worry about them getting hacker, etc. I can also have "asset trading key" which I give to a trading desk which is only interested in managing my asset portfolio (so they can sell my assets or transfer them out, yet have no direct access to my NRS balance)
Logged

barbierir

  • Sr. Member
  • ****
  • Karma: +36/-2
  • Offline Offline
  • Posts: 316
    • View Profile
Re: What is Account Control ?
« Reply #7 on: July 07, 2015, 04:35:32 pm »

Hi, do you know if with Account Control will it possible to cover these two use-cases?

1. Create an account whose transactions are always phased and need the approval of another specific account.

This would make security safe & simple far above any other crypto, one could create a main account on a device and a secondary account on another device (ex. a smartphone) for approving transactions.
 
2. Set the rule that if an account doesn't make any outgoing transaction in a year, all its funds&assets get transfered to another specific account

This could be a backup plan in case of loss of the passhprase or in order to transfer it to heirs in case of death

Logged

TheCoinWizard

  • Hero Member
  • *****
  • Karma: +97/-55
  • Offline Offline
  • Posts: 614
  • Learn by questioning everything!
    • View Profile
Re: What is Account Control ?
« Reply #8 on: July 07, 2015, 10:15:59 pm »

Hi, do you know if with Account Control will it possible to cover these two use-cases?

1. Create an account whose transactions are always phased and need the approval of another specific account.

This would make security safe & simple far above any other crypto, one could create a main account on a device and a secondary account on another device (ex. a smartphone) for approving transactions.
Lets say i am a parent and want to give my daughter a nxt account. Can I set it up that way that I always have to approve all her transactions?

This should be possible with Account Control (coming in 1.6 branch, if I remember correctly - so it won't take long).

2. Set the rule that if an account doesn't make any outgoing transaction in a year, all its funds&assets get transfered to another specific account

This could be a backup plan in case of loss of the passhprase or in order to transfer it to heirs in case of death
I proposed this as set heir(s) transaction...

https://nxtforum.org/nxt-improvement-proposals/set-heir-transaction

Which has been included here

https://nxtforum.org/general/list-of-feature-request-for-nrs/

Which basically means it might ever get implemented...
Logged
Welcome to the After Nxt Calendar era...
Which started in the year 222 of the French Republic, Frost month, on the fifth day of the first week, better known as the 2456621th Julian day,
even better known as 24 November 2013 at 12:00:00 UTC.

barbierir

  • Sr. Member
  • ****
  • Karma: +36/-2
  • Offline Offline
  • Posts: 316
    • View Profile
Re: What is Account Control ?
« Reply #9 on: July 08, 2015, 04:52:42 am »

Thanks, Nxt is mind-blowing  8)
Logged
 

elective-stereophonic
elective-stereophonic
assembly
assembly