This all is then somehow more secure because the wallet is not stored on the active machine, but separately.
Almost. If the wallet isn't on the active machine, it can't be lost or stolen.
What is the definition of active machine then? If the Udoo pc is doing mining then its connected to the Internet and very much an active machine.
The Udoo is the one doing the mining and has a its own wallet. I thought it was possible to set up a sort of bitcoin bank with multiple accounts (aka wallets) served from one central server. I have my account, my grandson has his account. Using a smartphone or some such, I would ssh into my account and request a transfer. I would get back something indicating the transfer has been entered. From my first reading, I thought the immediate response would be either a "physical" bitcoin as an image or a verifiable conformation code. After all the vendor needs conformation before I take my coffee and leave

SSH would be configured to accept connections to the wallet only from devices with specific uuids.
I have never heard of such an option. Where in sshd_config is there such an option?
[\quote}
My bad. I was referring to using MAC/SSID over a VPN to connect my remotes to the server. I tried to set up a system that forbid certain OS from connecting but didn't have much success.
I send a request for x amount of bitcoins, get back a qr code, the merchant scans the code, transaction is done.
It doesn't work like that. You have to specify the recipient's address and amount and it is bitcoind that will send the transaction over the network.
See my comment above. I understand the transaction has to be added to the block chain. I thought there was also the equivalent of a cash transaction accomplished by using "physical" bitcoins. I understand US regulators are concerned someone might offer some such service to the public and thus be in the business of printing money.