Advanced New Technologies Co., Ltd.

Alibaba Group Holding Limited

Alipay (Hangzhou) Information Technology Co., Ltd.

Alipay Information Technology Co., Ltd.

Jiawei Liu

Renhui Yang

Yuan Chen

Yuqi Lin

Shubo Li

Chenming Hua

Jinhua Wang

Peng Zhang

Desheng Wang

Qian Zhang

Yang Liu

Xi Jia

Ge Jin

Chenkan Shen

Chifei Zhang

Fansheng Kong

Chifeng Zhang

Fansheng King

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for blockchain-based cross-entity authentication are provided. One of the methods includes: obtaining an authentication request by a first entity for authenticating a user, wherein the authentication request comprises a decentralized identifier (DID) of the user; in response to determining that the first entity is permitted to access authentication information of the user endorsed by a second entity, generating a blockchain transaction for obtaining an authentication result of the user by the second entity, wherein the authentication result is associated with the DID; and transmitting the blockchain transaction to a blockchain node for adding to a blockchain.

System and method for blockchain-based cross-entity authentication

A message processing request is received from a channel partner device, where the message processing request includes a ciphertext message encrypted in a trusted execution environment (TEE) of a service provider device based on a service processing request that includes a plaintext message of the ciphertext message, and where the service processing request requests at least a portion of the plaintext message to be sent to a target user. A first smart contract deployed in a blockchain of the blockchain network is invoked using a TEE of a blockchain node of a blockchain network. The ciphertext message is decrypted based on the first smart contract to obtain the plaintext message. The plaintext message is sent to an operator device to forward the at least a portion of the plaintext message to the target user.

Service processing methods, apparatuses, devices and systems

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for blockchain-based decentralized-identifier creation, are provided. One of the methods includes: obtaining a request for creating a decentralized identifier (DID), wherein the request comprises a public key of a cryptographic key pair; creating, based on the public key, a blockchain account associated with a blockchain; creating the DID based on information associated with the blockchain account; and returning a confirmation message comprising the created DID.

System and method for decentralized-identifier creation

Implementations of the present specification disclose a method, apparatus, device, and a readable medium for identifying private data. A solution includes: obtaining a first length distribution vector and first character distribution statistical information of a first data set, the first data set being a set of private data samples; obtaining a second length distribution vector and second character distribution statistical information of a second data set, the second data set being a set of at least a part of data samples corresponding to a to-be-identified field; calculating a length distribution similarity and a character distribution similarity between the first data set and the second data set, and determining whether data corresponding to the to-be-identified field is private data of a same type as the first data set based on the length distribution similarity and the character distribution similarity.

Method, apparatus, device, and readable medium for identifying private data

Implementations of the present specification disclose a data identification method, apparatus, device, and a computer-readable medium. A solution includes: obtaining a first data set, data samples in the first data set being at least a part of data of a to-be-identified field; obtaining a state transition matrix set generated based on statistics of data samples in a second data set, a data type of the data samples in the second data set being known; determining sample state transition probabilities corresponding to the data samples in the first data set based on the state transition matrix set; determining a ratio between a number of data samples in the first data set whose sample state transition probabilities are greater than a first threshold and a total number of the data samples in the first data set; and determining data corresponding to the to-be-identified field as being of a same data type as the data samples in the second data set in response to that the ratio is greater than a second threshold.

Data identification method, apparatus, device, and readable medium

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for verifiable-claim issuance. One of the methods includes: receiving, from a first entity, a request for creating a verifiable claim (VC) for a decentralized identifier (DID) associated with a second entity; obtaining, in response to receiving the request, a digital signature associated with the first entity; and generating the VC based on the received request and the obtained digital signature.

System and method for issuing verifiable claims

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for claim verification. One of the methods includes: receiving, from a first entity, a request for verifying a verifiable claim (VC) that comprises a digital signature; obtaining, based on the VC, a public key associated with a second entity; determining that the digital signature is created based on a private key associated with the public key; and verifying the VC based on the determination.

System and method for verifying verifiable claims

Disclosed herein are methods, systems, and apparatus, including computer programs encoded on computer storage media, for generating a pattern program using a genetic algorithm. The genetic algorithm operates on example data strings that represent the data categories to be recognized or extracted through named entity recognition. In the initialization stage, the initial pattern programs are generated based on example data strings that represent the data categories to be recognized or extracted through named entity recognition. Starting from the initial pattern programs, genetic operations are iteratively conducted to generate generations of offspring pattern programs. In each round of the genetic operation, offspring pattern programs are generated through the crossover operation and the mutation operation.

Named entity recognition and extraction using genetic programming

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for implementing a resolver service. One of the methods includes: obtaining, from a blockchain, event data for a plurality of blockchain transactions associated with a plurality of decentralized identifiers (DIDs); storing the event data in a database; receiving a request for information associated with the event data, wherein the request comprises one or more account identifiers; identifying one or more DIDs respectively corresponding to the one or more account identifiers based on pre-stored mapping relationships between the one or more DIDs and the one or more account identifiers; and providing, from the database, event data for one or more blockchain transactions associated with the identified one or more DIDs.

System and method for implementing a resolver service for decentralized identifiers

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for decentralized-identifier creation. One of the methods includes: receiving a request from a first entity for obtaining a new decentralized identifier (DID) for a second entity; determining an existing DID associated with the first entity based on the request; generating a cryptographic key pair associated with the second entity comprising a public key and a private key; creating, based on the public key, a DID document associated with the new DID, wherein the DID document comprises the existing DID associated with the first entity; generating a blockchain transaction for adding the DID document to the blockchain; signing the blockchain transaction using the private key of the cryptographic key pair associated with the second entity; and sending, to a blockchain node associated with the blockchain, the signed blockchain transaction for the blockchain node to add to the blockchain.

System and method for creating decentralized identifiers

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for blockchain-based decentralized-identifier authentication, are provided. One of the methods includes: obtaining, from a computing device, a request for creating an authentication challenge for a decentralized identifier (DID); obtaining, from a blockchain network, a DID document corresponding to the DID; retrieving a public key associated with the DID from the received DID document; creating the authentication challenge by encrypting a piece of original text using the public key to create a piece of ciphertext; obtaining information associated with an authentication service endpoint for the DID from the received DID document; sending, to the authentication service endpoint according to the obtained information, the created authentication challenge.

System and method for decentralized-identifier authentication

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for blockchain-based cross-entity authentication are provided. One of the methods includes: obtaining, from a blockchain, a blockchain transaction comprising an authentication request by a first entity for authenticating a user, wherein the authentication request comprises a decentralized identifier (DID) of the user; in response to determining that the first entity is permitted to access authentication information of the user endorsed by a second entity, obtaining an authentication result of the user by the second entity in response to the obtained blockchain transaction, wherein the authentication result is associated with the DID; generating a different blockchain transaction comprising the authentication result; and transmitting the different blockchain transaction to a blockchain node for adding to the blockchain.

Growing community of inventors

Hangzhou, China

Jiawei Liu