1. Using an offline computer, a serial number, passphrase entropy, and an intermediate code are generated in Ballet’s USA headquarters.
2. Serial number and intermediate code are then electronically transmitted to Ballet’s office in China.
2
3. Afterwards, the BIP38 process is used to randomly generate a private key entropy using the intermediate code data.
The corresponding public key and deposit addresses will be generated, along with a confirmation code, to be used for verification and additional checking afterwards.
This private key entropy is secure data, which is only stored once, on a hard disk drive.
3
In China, this two-layer QR code sticker is manufactured using an offline process in a secure printing facility
The secure data is never transmitted to any external computers or system.
The secure data is transferred physically, on a hard disk drive.
Right after the printing process, the secure data is then deleted, overwritten, and physically destroyed.
4
The secure two-layer QR code sticker will then be securely applied to the physical cold storages, without ever revealing the private key entropy.
Once finished, the partially assembled cold storages are sent to the United States for final production.
The confirmation codes are also electronically sent back to the United States.
This is for further verification to ensure that the private key entropy and decryption passphrase entropy does match up with the generated cryptocurrency deposit addresses.
5
The physical cold storages and QR code stickers are verified and double checked in the United States according to their corresponding serial numbers.
The matching decryption passphrase entropy and serial number will then be laser etched onto the cold storages.
A strip of tamper evident scratch-off material is then applied on the cold storage, to cover the passphrase entropy.