Zhejiang University

Zju-hangzhou Global Scientific and Technological Innovation Center

Hangzhou Abmatrix Technology Co., Ltd

Kui Ren

Bingsheng Zhang

Jian Ming Liu

Yibiao Lu

Weiran Liu

Feng Lin

Di Wu

Chao Wang

Jinsong Han

Rui Chang

Zhuoruo Zhang

Zhigao Wang

Xinle Cao

Ming Gao

Hao Lu

Zhongjie Ba

Tiantian Liu

Zhelei Zhou

Jingyu Li

Haitao Wang

Jingzhong Xu

Shaoping Pan

Kaiyu Lu

Wenyao Xu

A safety management and control system for full lifecycle of industrial control data, comprising: an administrator terminal holding an administrator public-private key pair and an administrator public key root certificate; a server comprising an encrypted database kernel and an initializer, the encrypted database kernel is located in a trusted execution environment and contains industrial control data; the initializer is configured to initialize the encrypted database kernel in combination with the administrator public key root certificate sent by the administrator terminal when the server is deployed for the first time, and return a self-signed certificate generated by the server to the administrator terminal; and a client that accesses the system through the certificate issued by the administrator terminal, and interacts with the server for industrial control data within the authority configured by the administrator terminal.

Safety management and control system for full lifecycle of industrial control data

A method and an apparatus for privacy protection biometric authentication and an electronic device. The method comprises the following steps: constructing a corresponding a biological data template according to a biological information data set input by a user when registering; generating a pair of public key and private key by asymmetric cryptography technology; generating encrypted biological data by a secret sharing solution and OKVS technology according to the biological data template and the private key; sending the public key and the encrypted biological data to a server; recovering the private key by OKVS technology according to the biological data input by the user during authentication and the encrypted biological data; constructing a signature according to the recovered private key and the corresponding public key; sending the signature to the server, so that the server verifies the user according to the public key and the signature.

Method and device for privacy protection biometric authentication, and electronic device

A batch private information retrieval method and apparatus, including: agreeing on a hash function, calculating a serial number index in an original database, retaining a result of each serial number index for each hash function, and obtaining a first hash bucket; filling an index of a batch query into a second hash bucket of a same length as the first hash bucket by the client, and encoding a filling result by using a constant weight code encoding manner; encrypting an obtained encoding result as a batch query request by the client; comparing the batch query request with the first hash bucket by the server to obtain a corresponding intermediate result, calculating correspondingly the intermediate result and the original database to obtain a corresponding query result ciphertext; and decrypting the query result ciphertext by the client, and thus simultaneously obtaining a query result of the batch query request.

Batch privacy information retrieval method and apparatus

The disclosure provides a multimodal speech recognition method and system, and a computer-readable storage medium. The method includes calculating a first logarithmic mel-frequency spectral coefficient and a second logarithmic mel-frequency spectral coefficient when a target millimeter-wave signal and a target audio signal both contain speech information corresponding to a target user; inputting the first and the second logarithmic mel-frequency spectral coefficient into a fusion network to determine a target fusion feature, where the fusion network includes at least a calibration module and a mapping module, the calibration module is configured to perform mutual feature calibration on the target audio/millimeter-wave signals, and the mapping module is configured to fuse a calibrated millimeter-wave feature and a calibrated audio feature; and inputting the target fusion feature into a semantic feature network to determine a speech recognition result corresponding to the target user. The disclosure can implement high-accuracy speech recognition.

Multimodal speech recognition method and system, and computer-readable storage medium

A multi-party privacy computing method and device based on semi-trusted hardware, wherein the method applied to semi-trusted hardware comprises the following steps: acquiring random number masks and random seeds of all user terminals; generating a garbled circuit seed according to the random seeds; generating a garbled circuit according to a predetermined circuit description and the garbled circuit seed, wherein the garbled circuit comprises garbled tables, wire labels and decoding information; sending the wire labels corresponding to the inputs of all user terminals to a user terminal corresponding to the semi-trusted hardware by using an oblivious transfer protocol; and sending the garbled table and the decoding information to the user terminal corresponding to the semi-trusted hardware, so that the user terminal can compute an output value according to the garbled tables, the decoding information and the wire label corresponding to the inputs of all user terminals.

Multi-party privacy computing method and device based on semi-trusted hardware

A method and a device for remote acquisition of correlated pseudo-random numbers based on semi-trusted hardware. When applied to semi-trusted hardware, the method comprises: acquiring a random seed of a sender and a selected number of a receiver; generating a plurality of first correlated pseudo-random numbers and first commitment seeds according to the random seed and a predetermined category of the correlated pseudo-random number; generating a first commitment value and a first open value by a commitment mechanism according to the first correlated pseudo-random numbers and the first commitment seeds; generating a Merkle proof according to the first commitment value and the selected number; sending the first correlated pseudo-random numbers, the first commitment value, the first open value and the Merkle proof corresponding to the selected number to the receiver.

Method and device for remote acquisition of correlated pseudo-random numbers based on semi-trusted hardware

This invention discloses a method for discovering vulnerabilities of operating system access control based on model checking. In this method, security attribute and security specifications of operating system access control module are analyzed to construct the access control model. To discover vulnerabilities in the model, security analysis is performed for access control functionality with theorem proving techniques, and consistency of abstract machine specification and correctness and completeness of the components are verified with model checking tools. This method provides theoretical and technical support for studies in the field of operating system security.

Method for discovering vulnerabilities of operating system access control mechanism based on model checking

Disclosed is a database encryption method supporting composable SQL query, which mainly comprises the following steps: (1) a user encrypting and preprocessing data based on the encryption scheme provided by the present disclosure and uploading an encryption result and preprocessed data to a service provider; (2) setting and uploading a SQL query instructions: the user uploads the query instruction to the service provider according to actual needs, and uploads auxiliary parameters for the query instruction at the same time; (3) data query: the service provider performs SQL query according to the query instruction and auxiliary parameters received from the user, saves a calculation result, updates the data and returns a query result to the user.

Method for encrypting database supporting composable SQL query

Disclosed is a method and an apparatus a zero-knowledge proof and an electronic device. That method comprise the following steps: selecting a data processing relationship, and processing private data and public data to obtain a calculation result; respectively committing the private data and the calculation result according to a commitment parameter to obtain a first commitment value and a second commitment value, wherein the commitment parameter is generated by a trusted third party; generating a non-interactive zero-knowledge proof according to the data processing relationship; wherein the commitment parameter, the first commitment value and the second commitment value are used by a verifier to verify the non-interactive zero-knowledge proof. The present disclosure solves the technical problem that bilinear pairing cannot be used in the scenario where bilinear pairing cannot be used in related technologies.

Zero-knowledge proof method and electronic device

Growing community of inventors

Hangzhou, China

Kui Ren