Zhejiang University

Zju-hangzhou Global Scientific and Technological Innovation Center

Hangzhou Abmatrix Technology Co., Ltd

Bingsheng Zhang

Kui Ren

Weiran Liu

Yibiao Lu

Kaiyu Lu

Haitao Wang

Zhelei Zhou

Jingzhong Xu

Zhigao Wang

A safety management and control system for full lifecycle of industrial control data, comprising: an administrator terminal holding an administrator public-private key pair and an administrator public key root certificate; a server comprising an encrypted database kernel and an initializer, the encrypted database kernel is located in a trusted execution environment and contains industrial control data; the initializer is configured to initialize the encrypted database kernel in combination with the administrator public key root certificate sent by the administrator terminal when the server is deployed for the first time, and return a self-signed certificate generated by the server to the administrator terminal; and a client that accesses the system through the certificate issued by the administrator terminal, and interacts with the server for industrial control data within the authority configured by the administrator terminal.

Safety management and control system for full lifecycle of industrial control data

A method and an apparatus for privacy protection biometric authentication and an electronic device. The method comprises the following steps: constructing a corresponding a biological data template according to a biological information data set input by a user when registering; generating a pair of public key and private key by asymmetric cryptography technology; generating encrypted biological data by a secret sharing solution and OKVS technology according to the biological data template and the private key; sending the public key and the encrypted biological data to a server; recovering the private key by OKVS technology according to the biological data input by the user during authentication and the encrypted biological data; constructing a signature according to the recovered private key and the corresponding public key; sending the signature to the server, so that the server verifies the user according to the public key and the signature.

Method and device for privacy protection biometric authentication, and electronic device

A multi-party privacy computing method and device based on semi-trusted hardware, wherein the method applied to semi-trusted hardware comprises the following steps: acquiring random number masks and random seeds of all user terminals; generating a garbled circuit seed according to the random seeds; generating a garbled circuit according to a predetermined circuit description and the garbled circuit seed, wherein the garbled circuit comprises garbled tables, wire labels and decoding information; sending the wire labels corresponding to the inputs of all user terminals to a user terminal corresponding to the semi-trusted hardware by using an oblivious transfer protocol; and sending the garbled table and the decoding information to the user terminal corresponding to the semi-trusted hardware, so that the user terminal can compute an output value according to the garbled tables, the decoding information and the wire label corresponding to the inputs of all user terminals.

Multi-party privacy computing method and device based on semi-trusted hardware

A method and a device for remote acquisition of correlated pseudo-random numbers based on semi-trusted hardware. When applied to semi-trusted hardware, the method comprises: acquiring a random seed of a sender and a selected number of a receiver; generating a plurality of first correlated pseudo-random numbers and first commitment seeds according to the random seed and a predetermined category of the correlated pseudo-random number; generating a first commitment value and a first open value by a commitment mechanism according to the first correlated pseudo-random numbers and the first commitment seeds; generating a Merkle proof according to the first commitment value and the selected number; sending the first correlated pseudo-random numbers, the first commitment value, the first open value and the Merkle proof corresponding to the selected number to the receiver.

Method and device for remote acquisition of correlated pseudo-random numbers based on semi-trusted hardware

Disclosed is a method and an apparatus a zero-knowledge proof and an electronic device. That method comprise the following steps: selecting a data processing relationship, and processing private data and public data to obtain a calculation result; respectively committing the private data and the calculation result according to a commitment parameter to obtain a first commitment value and a second commitment value, wherein the commitment parameter is generated by a trusted third party; generating a non-interactive zero-knowledge proof according to the data processing relationship; wherein the commitment parameter, the first commitment value and the second commitment value are used by a verifier to verify the non-interactive zero-knowledge proof. The present disclosure solves the technical problem that bilinear pairing cannot be used in the scenario where bilinear pairing cannot be used in related technologies.

Growing community of inventors

Hangzhou, China

Bingsheng Zhang