China Unionpay Co., Ltd.

Chengqian Chen

Yu Chen Zhou

Wei Guo

Zhijun Lu

Shuo He

Hongfeng Chai

Dingzhou Li

Bin Yu

Xin Wang

Hongwen Meng

Jianbin Zheng

Xiangxiang Yan

Wenhai Yu

Yu Zhou

Fen Zou

Disclosed in the present application are a model protection method and apparatus, a data processing method and apparatus, and a device and a medium, which are used for improving the security protection of a model. In the present application, a cloud device can determine, from a target model, a first sub-model which is stored in a trusted execution environment (TEE) of a terminal device, and send the first sub-model to the terminal device; the terminal device can store the first sub-model in the TEE of the terminal device; and the TEE can ensure that data processing, etc., are performed in a trusted environment.

Model protection method and apparatus, data processing method and apparatus, and device and medium

An electronic device, a trusted application calling method and apparatus, a device, and a medium are disclosed. Because a trusted application development platform is linked with native trusted applications respectively corresponding to multiple trusted execution environment operating systems (TEE OS), based on the trusted application development platform, a bytecode trusted application can be applicable to any TEE OS, and for different TEE OS hardware platforms, only one corresponding bytecode trusted application needs to be developed for one application. Moreover, the trusted application development platform and the byte code trusted application can be applied to electronic devices (terminals) of different TEE OSs.

Electronic device, trusted application calling method and apparatus, device, and medium

The invention relates to a verification method and a verification system based on a biometric feature ID chain. The method includes: acquiring a biometric feature to be verified; comparing the biometric feature to be verified with a biometric feature template in an old biometric feature template region, and comparing the biometric feature to be verified with a biometric feature template in a current biometric feature template region, to respectively match at least two biometric feature IDs; generating a biometric feature ID chain on the basis of the at least two biometric feature IDs; and sending a user ID, a device ID and the biometric feature ID chain to a backend for identity verification. In the invention, a biometric feature ID chain containing the biometric feature history of a unified user terminal is generated when a biometric feature is re-entered at a local user terminal.

Verification method and verification system based on biometric feature ID chain, and user terminal

The present invention relates to a method for access control of a multimedia system to a secure operating system and a mobile terminal for implementing the method. The method includes the steps of: initiating an application access request for selecting a trusted application from a client application of a multimedia system to a secure operating system; making a decision as to whether the client application is a malicious application, and if not, proceeding to a next step, if yes, returning Selection Failure to the client application and performing an interrupt handling; sending the application access request from the multimedia system to the secure system; and acquiring, at the secure operating system, the trusted application based on the application access request and returning the trusted application to the multimedia system. The malicious accesses initiated by a malicious application to a trusted application in a securing operating system can be prevented without switching between systems, and the problem that a trusted application cannot be accessed due to malicious access can be avoided.

Tee access control method and mobile terminal implementing same

Embodiments of the present invention disclose an application management method for terminals, including: after receiving the application download request sent by the terminal, the application server sends the corresponding application installation package to the terminal. Then, the first verification message sent by the terminal is received, and the first verification message is generated by the terminal according to the content of the received application installation package. After determining that the first verification message is consistent with a stored second verification message, the application server sends an permit-to-install message to the terminal, so that the terminal installs the application according to the received application installation package. Because the application server determines the legitimacy of the application package, it does not need the terminal to verify by using the certificate, thereby reducing the certificate work management for the terminal and improving the efficiency of application installation.

Application management method for terminal, application server, and terminal

The invention provides communication method and apparatus based on NFC, and in particular, to communication method and apparatus based on NFC in a security element (SE), a communication method based on NFC in a smart terminal, a security element and a smart terminal. The invention proposes a new way of connection with the NFC device so that the TEE applications can have NFC ability.

NFC-based communication method and apparatus

A device and method for supporting communication between various types of secure elements is provided. The device comprises a protocol converter, and the protocol converter comprises: a plurality of communication interfaces for correspondingly coupling with each type of secure element; and a management module coupled with each communication interface; wherein different types of secure elements follow different bottom level communication protocols, each communication interface is configured to follow the same bottom level communication protocol as the secure element it correspondingly couples with; the management module is configured to follow the same upper level communication protocol so as to realize a protocol conversion between any bottom level communication protocol and the upper level communication protocol, and the management module is used for dynamically establishing a connection channel for any two of the communication interfaces, thus realizing a corresponding communication between the secure elements of any two different types.

Device for supporting communication between multiple types of safety carriers and communication method therefor

The invention provides a master MMC/SD apparatus for simultaneously supporting bulk storage and Ethernet communication, a slave MMC/SD apparatus for simultaneously supporting bulk storage and Ethernet communication, a system composed of these two apparatuses as well as a method of operating the system. The apparatuses, system and method which simultaneously support bulk storage and Ethernet communication and which are based on MMC/SD interface enable a master apparatus with MMC/SD interface to support network function while maintaining bulk storage function as well, thus greatly expanding applicable areas of such embedded terminal apparatus with the MMC/SD interface that has bulk storage function.

System and method for supporting both bulk storage and Ethernet communications

The invention discloses a security information interaction system, apparatus and method, the method comprising the following steps: establishing a first communication channel and a second communication channel between a security information interaction terminal and a security carrier; the security carrier actively sending a command to the security information interaction terminal via the first communication channel and the second communication channel so as to complete a corresponding security information interaction procedure. With the security information interaction system, apparatus and method disclosed by the invention, the security carrier can send a command to the security information interaction terminal flexibly and actively on its own, and thus greatly improving the efficiency of the security information interaction system.

Security information interaction system, device and method

The invention provides an apparatus used for security information interaction comprising a first system management device for providing an operational environment for routine applications and a second system management device for providing an operational environment in a safe mode for security applications so as to perform a security information interaction process. The apparatus used for security information interaction disclosed by the invention has a high safety and a wide applicability and is low in cost.

Apparatus used for security information interaction

The invention discloses a method for using a shared apparatus in a device capable of running two operating systems, which includes using a first application in a first operating system to communicate with the share apparatus, and when the first operating system is switched to a second operating system, sending associated information on the shared apparatus to a second application in the second operating system so that the second application can use the associated information to communicate with the shared apparatus.

Growing community of inventors

Shanghai, China

Chengqian Chen