China Unionpay Co., Ltd.

Eastcompeace Smart Card Co., Ltd.

China Unionpay

Hongfeng Chai

Zhijun Lu

Shuo He

Wei Guo

Yu Chen Zhou

Dingzhou Li

Chengqian Chen

Chengrong Wu

Jie Ping Wu

Rui Guo

Xiangxiang Yan

Yuemin Qi

Wenbin Hu

Jun Zhang

Bin Yu

Hong Li

Lijun Zu

Jinzhi Hua

Hongwen Meng

Jintan Wu

Dongjie He

Jianbin Zheng

Baohua Li

Zhihui Lv

Zhenfang Wang

Jianping Zeng

Mingbo Wang

Yixing Yan

Zhongguo Zhou

Yunfeng Xu

Huaiguang Shan

The invention discloses a method for realizing virtual secure element (VSE), which comprises the following steps: a secure element manager (SEM) generates a request which comprises virtualized configuration information; and a virtual machine monitor in a hypervisor allocates an address space for the VSE according to the above request.

Method for implementing virtual secure element

A device and method for supporting communication between various types of secure elements is provided. The device comprises a protocol converter, and the protocol converter comprises: a plurality of communication interfaces for correspondingly coupling with each type of secure element; and a management module coupled with each communication interface; wherein different types of secure elements follow different bottom level communication protocols, each communication interface is configured to follow the same bottom level communication protocol as the secure element it correspondingly couples with; the management module is configured to follow the same upper level communication protocol so as to realize a protocol conversion between any bottom level communication protocol and the upper level communication protocol, and the management module is used for dynamically establishing a connection channel for any two of the communication interfaces, thus realizing a corresponding communication between the secure elements of any two different types.

Device for supporting communication between multiple types of safety carriers and communication method therefor

The application discloses a load evaluation system for virtual machines in a cloud environment, comprising: a monitored data collecting module which is configured to collect monitored data from one or more virtual machines in a cloud data center; a monitored data processing module which is coupled with the monitored data collecting module and is configured to: perform aggregated grouping on the monitored data by using a first KMeans algorithm for each of the one or more virtual machines, each group having a center point coordinate, and calculate a performance characteristic of each virtual machine of the one or more virtual machines according to the grouping and the center point coordinates of individual groups, i.e., a first characteristic value; perform aggregated grouping on the one or more virtual machines using a second KMeans algorithm based on the first characteristic value of each virtual machine, thus determining the characteristic type and performance load value of each virtual machine of the one or more virtual machines. The application also discloses a load evaluation method for virtual machines in a cloud environment as well as a service node.

System and method for load estimation of virtual machines in a cloud environment and serving node

The invention provides a compliance detecting method of payment applications in a virtualized environment, and pertains to the field of security technology of payment applications. The detecting method is used for compliance detection for PCI DSS isolation demands. The detecting method can determine whether it is a compliance state by analyzing the current virtual machine domain and its connection from data stream, and can also determine whether it is a compliance state by analyzing the purity of network flow of virtual machines. The detecting method is suitable for a virtualized environment and makes the detection of compliance accurate in the virtualized environment, thus being advantageous for guaranteeing the security of payment applications.

Method for checking compliance of payment application in virtualized environment

The invention relates to management of programs on a mobile device, and in particular, to a method for activating application programs on a mobile device, and a mobile device based on this method. The method for activating application programs on a mobile device according to an embodiment of the invention comprises the following steps: receiving an application request from a device which is located outside the mobile device; identifying a transmission protocol associated with the application request; and if there are a plurality of safety entities in the mobile device which support the transmission protocol and store application programs associated with the application request, activating an application program associated with the application request in a default safety entity.

Starting an application on a mobile device

The present invention proposes a method for offline upgrading virtual machine mirror images. The method comprises: an mirror image security server collecting virtual machine mirror images, and extracting and storing the information of the collected virtual machine mirror images; and the mirror image security server executing an upgrade operation of virtual machine mirror images in an offline way based on the information of the collected virtual machine mirror images. The method for offline upgrading virtual machine mirror images disclosed in the present invention has higher upgrade efficiency and is capable of upgrading the virtual machine mirror images in an offline way.

Method for offline updating virtual machine images

The invention proposes a virtual machine abnormity recovering method in distributed environment, comprising: running an independent computing assembly on each physical machine on which a virtual machine resides, wherein the computing assembly periodically reports the current running state of the corresponding physical machine to a state database; periodically polling the state database by a highly available controller so as to check the running state of all the physical machines in a physical machine group under the control of the highly available controller; and executing subsequent abnormity processing operation if the running state of only one physical machine in the physical machine group is abnormal so as to ensure that virtual machines on the physical machine whose running state is abnormal continues running normally. The virtual machine abnormity recovering method in distributed environment disclosed by the invention can accurately determine and efficiently handle faults of the physical machines in a distributed environment.

Anomaly recovery method for virtual machine in distributed environment

The invention proposes a security information interaction system, apparatus and method based on security carrier's active command. The method comprises: an information interaction terminal, based on a user's command, establishes a security dialog channel between the information interaction terminal and a security carrier so as to perform a security information interaction process, wherein the user's command indicates a target application associated with the security information interaction process; and the security carrier activates the target application during the establishment of the security dialog channel and then executes the security information interaction process based on the security dialog channel. In the security information interaction system, apparatus and method based on security carrier active command disclosed in the invention, the security carrier can initiate an active command to the information interaction terminal.

Security information interaction system, device and method based on active command of secure carrier

The invention discloses a method and terminal device for continuously supplying power to external element. The method comprises the following steps: when a terminal device switches from a first operating system to a second operating system, a proxy external element application is generated in the second operating system so that the proxy external element application is associated with an external element; by means of this proxy external element application, the external element which is associated with the application in the first operating system before the above switch operation is continuously supplied with power after the above switch operation.

Method and terminal device for continuous power supply to external carrier

The invention relates to communication technology, and in particular, to a method of establishing communication connection between a mobile device and a secure element as well as a mobile device for implementing the method. The method comprises the following steps: when the mobile device detects that there is a secure element which establishes a physical connection with it, the mobile device performs a secure authentication on the secure element; if the secure authentication passes, the mobile device determines whether there is configuration information inside it which is required for establishing the communication connection between the mobile device and the secure element; and if there is the required configuration information inside the mobile device, the mobile device uses the configuration information to establish the communication connection with the secure element; otherwise, the mobile device obtains required configuration information from the secure element to establish the communication connection with the secure element.

Establishment of communication connection between mobile device and secure element

The invention provides an apparatus used for security information interaction comprising a first system management device for providing an operational environment for routine applications and a second system management device for providing an operational environment in a safe mode for security applications so as to perform a security information interaction process. The apparatus used for security information interaction disclosed by the invention has a high safety and a wide applicability and is low in cost.

Apparatus used for security information interaction

The invention provides a user terminal and a payment system. The user terminal comprises an input device, a multi-channel selection switch, an application module, a processor, a password processing module, and a security IC chip containing information on user's ID and/or banking card therein, wherein the multi-channel selection switch is coupled with the input device, the password processing module and the processor, the password processing module is coupled with the processor, and the security IC chip is coupled with the password processing module; the application module controls the multi-channel selection switch via the processor so as to place the user terminal in a password input mode or in a normal input mode. The invention ensures the safety in entering the user's password in hardware configuration so that even when software system of the user terminal is not safe in itself, the safety of input password can be ensured.

User terminal and payment system

The present invention is directed to an Ethernet communication method and system which are based on the MMC/SD interface. In the invention, the communication system includes at least one master device and at least one slave device, the at least one master device and the at least one slave device are connected via MMC/SD interface and communicate with each other on the Ethernet. The Ethernet communication method and system disclosed herein enables the device with the MMC/SD interface to act as a node in the network, and thus greatly expanding the application domain of such devices.

Ethernet communication system and method based on MMC/SD interface

The invention discloses a method for using a shared apparatus in a device capable of running two operating systems, which includes using a first application in a first operating system to communicate with the share apparatus, and when the first operating system is switched to a second operating system, sending associated information on the shared apparatus to a second application in the second operating system so that the second application can use the associated information to communicate with the shared apparatus.

Method for using shared device in apparatus capable of operating two operating systems

A computer processing system for implementing data upgrade includes a communication interface device, at least two application servers and a database server for storing data, wherein the communication interface device detects in real-time a connection state of the communication interface device and each of the application servers, and sends data received from external to an application server connected with itself for processing; all the application servers are connected with the database server to process data and store the processed data in the database server, the data upgrade is implemented in batch for the application servers requiring the data upgrade by disconnecting the application servers from the communication interface device and reestablishing the connection of the application servers with the communication interface device after the data upgrade is completed. During the data upgrade, upgrade may be implemented without shut-down of the system. Most importantly, all the servers available in the system always work at the same time and share the burden in switching, thus improving the working efficiency of the whole system.

Growing community of inventors

Shanghai, China

Hongfeng Chai