AI 中文总结
针对通用跨链账户的安全与信任挑战，研究提出模块化协议架构0xPass，通过分层设计与分阶段部署路径，在扩展跨链账户功能的同时逐步降低中心化信任，保障用户控制权。
AI 中文摘要
通用账户允许用户通过单一界面管理异构区块链生态系统中的资产并执行操作，但它们会带来涉及身份验证、授权、交易签名、密钥保管、恢复及去中心化的安全与信任挑战。本文提出0xPass，一种用于通用跨链账户的模块化协议架构。0xPass将请求编排、交易求解和交易签名拆分为可互操作的层；经用户批准的请求绑定至已认证身份并在各层间授权，而阈值签名可防止任何单一交易节点持有完整签名密钥。该设计还支持受限授权委托、交易策略、账户恢复、分布式密钥管理，以及独立运营子网间可审计的通信。我们描述了一种分阶段部署路径：从集中运营的服务到许可网络，最终到具备第三方模块、抵押担保的准入机制及轮换密钥管理委员会的无许可网络。由此产生的架构为扩展跨链账户功能提供了实用框架，同时逐步降低中心化信任并保留用户对交易授权的控制权。
英文摘要
Universal accounts allow users to manage assets and execute operations across heterogeneous blockchain ecosystems through a single interface, but they introduce security and trust challenges involving authentication, authorization, transaction signing, key custody, recovery, and decentralization. This paper presents 0xPass, a modular protocol architecture for universal cross-chain accounts. 0xPass separates request orchestration, transaction solving, and transaction signing into interoperable layers. User-approved requests are bound to authenticated identities and authorized across layers, while threshold signatures prevent any single transaction node from holding a complete signing key. The design also supports constrained authorization delegation, transaction policies, account recovery, distributed key management, and auditable communication among independently operated sub-networks. We describe a staged deployment path from a centrally operated service to a permissioned network and ultimately to a permissionless network with third-party modules, collateral-backed onboarding, and rotating key-management committees. The resulting architecture provides a practical framework for extending cross-chain account functionality while progressively reducing centralized trust and preserving user control over transaction authorization.
