Thank you very helpful. We are a business that wants to be able to take bitcoin payments on account for future orders. It works well with our model. Perhaps, we need to communicate a unique customer number to them independently of their deposit? – baynard – 2018-08-20T20:41:48.280

@baynard I think that could work, so long as the identifying number is generated, communicated, and stored securely. It does open up some additional considerations though: You wouldn’t want an employee with access to your backend able to falsely claim a large deposit, you wouldn’t want the algorithm that generates identifying numbers to be game-able, etc – chytrik – 2018-08-20T22:41:38.690

I wanted to ask you too about a more old school variation on TEV's idea (forgive me if I'm missing something fundamental, my business is trying to accept bitcoin but I have very limited knowledge re. bitcoin, (i) customer sends bitcoins (ii) customer texts using Signal/other encrypted messaging app a unique number THEY generate (iii) customer makes payments from their deposit using their unique number. If approach works I can build better flow and ux into our platform. Do you see any issues/security, etc with this less artful approach? Matching customer with deposit? Thxs again! – baynard – 2018-08-21T00:37:36.493

@baynard I replied to this on JBaczuk’s answer. As another option that is more straightforward: if your customers can create any sort of account on your site, you could simply generate a unique deposit address for each account. This would remove the need to prove ownership of an address that made a deposit, users would instead simply need to maintain ownership of an account. This is a pretty standard model for a custodial service/site. – chytrik – 2018-08-21T00:50:25.050

Thank you. Your answer is a helpful elaboration. We are a business that wants to be able to take bitcoin payments on account for future orders. It works well with our model. Perhaps we need to communicate a unique customer number to them independently of their deposit, or is their some other secure way of doing this without using the signmessage method, as per other other answer, this might limit customers? – baynard – 2018-08-20T20:46:32.203

You could develop wallet software that will handle the signing so there is a good UX. However, as @chytrik noted, you don't want to require users to expose public keys (for ECDLP attack prevention). I guess you could warn them so that they can create a single address just for this tx. – JBaczuk – 2018-08-20T21:03:44.710

A minor variation on the theme of signing is as follows. (i) Customer sends you bitcoins. (ii) You encrypt an arbitrary text using customer's Bitcoin address (you know their address since it's visible in your wallet as the source of the incoming bitcoins). (iii) You email the encrypted text to the customer, with instructions on how they can decrypt it in their wallet. (iv) Customer emails you back with the decrypted text, thus proving that they own the address. But, this will work only if the customer uses a non-custodial wallet (custodial wallet = no access to private keys!) – None – 2018-08-20T21:58:56.223

@TEV what about a more old school variation on your theme (forgive me if I'm missing something fundamental, my business is trying to accept bitcoin as a payment method but I have very limited knowledge when it comes to bitcoin, (i) customer sends bitcoins (ii) customer texts using Signal or other encrypted messaging app a unique number THEY generate (iii) customer makes payments from deposit using their unique number. If the approach works we can build a better flow and ux into our platform. Do you see any issues/security, etc with this less artful approach? Thank you again! – baynard – 2018-08-20T23:56:58.813

@baynard anyone watching the blockchain for payments to your service could also send a message claiming they own that deposit, so this doesn’t solve the issue of proving ownership of a deposit. The method @ TEV suggested would work, but I don’t know of any wallet that will decrypt messages encrypted with a bitcoin public key. Importing a private key into some other cryptographic software to deal with the decryption creates risks for your customer, so I think using the message signing functionality is a better solution – chytrik – 2018-08-21T00:45:51.197

@chytrik Electrum has a point-&-click interface for decrypting messages that have been encrypted with a Bitcoin address (obviously, only if the corresponding private key is in the wallet!). It doesn't need the internet to do this, so the technique works for cold-storage wallets as well as for “hot" wallets. – None – 2018-08-21T11:15:50.200

@bayard I think you mean embedding a payment ID in a Bitcoin transaction. Technically possible, but not commonly done (so perhaps tricky for customers). Other cryptocurrencies (XRP, Monero) do have this feature, and it's used a lot by businesses that accept deposits of these currencies. But for Bitcoin, the convention seem to be that the business does not publicly declare a receiving address: rather, it assigns a different address (from its own wallet) to each customer, and instructs each customer accordingly. Perhaps that's what you really want (rather than formal cryptographic proof!). – None – 2018-08-21T11:28:02.840

@TEV thanks this is super helpful. I want to go with bitcoin so I think assigning a different address to each customer will be the most secure and easiest ux solution – baynard – 2018-08-21T13:28:46.777

A hierarchical deterministic wallet could be what you want. It gives you thousands of addresses in your wallet, so you can label a spare address with customer's name every time you acquire a new customer. The hierarchical deterministic thing simplifies your backup system since you just have one seed-phrase (on paper in a safe?) to back up all those addresses. For fraud-resistant storage of the seed phrase, check out Shamir's Secret Sharing Scheme (the digital version of having several people each knowing only part of a combination lock). – None – 2018-08-21T14:33:29.903

@TEV I didn’t know electrum has that functionality! My mistake, thanks for clarifying. – chytrik – 2018-08-21T15:37:17.893

@chytrik I'm not quite right (at least, not for BTC, so I may have been thinking of XRP). As explained here you can't get the public key from the address alone. On the other hand, it doesn't do any harm for the owner of the address to disclose the public key to people from whom they want to receive encrypted messages. The Electrum message-encryption box asks for a public key. Bottom line: the idea is valid but actually using it is slightly convoluted.

Hit a hurdles with unique addresses for customers integrating into our app without a lot of reinvention of the wheel....what about a slight variation on above...i) customer messages id# (x = id) ii) we message back y id# (x + y = PIN) iii) customer makes deposit and messages deposit amount and their PIN iv) Customer can only access account if they have PIN. Since PIN is generated before deposit anyone following block chain will only see deposit amount but not have PIN to use. Practical issues, logic flaws, other flaws in approach...THXS! – baynard – 2018-08-21T18:24:31.227