Advanced New Technologies Co., Ltd.

Alibaba Group Holding Limited

Zhejiang University

Alipay (hangzhou) Information Technology Co., Ltd.

Ningbo Fotile Kitchen Ware Co., Ltd.

Zhejiang Yongtai Technology Co., Ltd.

Alipay Information Technology Co., Ltd.

Lei Wang

Chaofan Yu

Xing Chen

Aihui Zhou

Qunshan Huang

Ning Zhang

Hongliang Tian

Junxian Xiao

Ge Chen

Yanghui Liu

Chao Xiu

Chao Feng Meng

Yibin Xiong

Chaofeng Meng

Jiayin Liu

Xufeng Lin

Ling Xie

Xingyu Chen

Xinying Yang

Feng Lin

Feng Zhang

Ying Yan

Jun Wu

Changzheng Wei

Huanmi Yin

Jiesheng Wu

Lei Zhang

Lingnan Shen

Yang Zhao

Yang Yang

Zhe Han

Hui Zhang

Peng Wu

Changhua He

Yin Wang

Mingxing Xu

Yan Xia

Qingkai Mao

Kai Tang

Yongzhi Zhang

Bin Fang

Zhiquan Bao

Linxi Yao

Shirui Chang

Weiwen Cai

Jie Lan

Yuebin Shen

Lei Yang

Feng Zhu

Zhongqun Mao

Yongding Zhu

Qingda Lu

Ji Xu

Li Zhang

Hongyue Sun

Lingyun Chen

Xiaowei Chen

Li Xu

Zhongzheng Ye

Jian-Jun He

Yingde Liu

Yuequan Shang

Renbao He

Hongming Shao

Yizhong Jin

Jinming Cui

Jian Du

Yufei Lu

Pu Duan

Qinghua Ye

Xianliang Fang

Liping Bao

Yunhe Fan

Deyou Zhan

Xiaozhe Qiu

Chenjie Shi

Benyu Zhang

Jin Tan

Zhiyong Lin

Xiaohui Pei

Leilei Tian

Junpu Chen

Jun Qi

Shunde Cao

Kefeng Yu

Mengyun Zhao

Chuanzhi Li

Haodi Xu

Embodiments of this specification provide computer-implemented methods, apparatuses, computer-readable media, and systems for secure multi-party computation. In an example secure multi-party computation method, a first party encrypts a first plaintext segment of target data by using a homomorphic encryption algorithm based on a public key held by the first party in a first key pair to obtain a first ciphertext segment. A second plaintext segment of the target data is owned by a second party. The first party sends the first ciphertext segment to the second party. The second party performs a homomorphic addition operation in the homomorphic encryption algorithm on the first ciphertext segment and the second plaintext segment of the target data to obtain ciphertext data of the target data. The ciphertext data is decrypted based on a private key in the first key pair.

Secure multi-party computation methods, apparatuses, and systems

Implementations of this specification provide query optimization methods, apparatuses, and systems for secure multi-party databases. In an implementation, a method includes: receiving a current query associated with a plurality of target database of a multi-party database system, generating a plurality of execution plans for the current query, determining, for each execution plan, a respective cost computation formula of a plurality of cost computation values for computing an execution cost of jointly executing the execution plan by the plurality of target databases, receiving a secure computation result from each of a plurality of query engines corresponding to the plurality of target databases, and determining an optimal execution plan having a lowest cost value in the plurality of cost computation formulas based on the secure computation result.

Query optimization methods, apparatuses, and systems for secure multi-party database

Methods and systems are provided for improving user authentication and access control by a network file system service in a multi-tenant public cloud environment by receiving a request for a connection to a file system from a file system client (client), sending an identification request for identification authentication of the client to a control system, receiving a response from the control system, establishing the connection to the file system upon determining that the connection to the file system is allowed based on cloud tenant information associated with the client, receiving an attempt to access the file system from the client by a sub-user, authenticating the sub-user based on the cloud tenant information, issuing a security token including a globally unique sub-user identifier of the sub-user, and using the security token to determine access rights of the sub-user to the file system for a subsequent request.

Authentication and authorization for cloud file system

Disclosed are 7,7′-dihalo-3,3,3′,3′-tetramethyl-1,1′-spirobiindane and a preparation method thereof. The 7,7′-dihalo-3,3,3′,3′-tetramethyl-1,1′-spirobiindane is a compound represented by formula I, or an enantiomer, a raceme or a diastereomer thereof. The compound of formula I could be prepared by using a racemic or optically active 3,3,3′,3′-tetramethyl-1,1′-spirobiindane-6,6′-diol as a raw material through a series of reactions. The 7,7′-dihalo-3,3,3′,3′-tetramethyl-1,1′-spirobiindane is a key intermediate for preparing 3,3,3′,3′-tetramethyl-1,1′-spirobiindane-based phosphine ligand compounds represented by formula II or III.

7,7′-dihalo-3,3,3′,3′-tetramethyl-1,1′-spirobiindane and preparation method thereof

The implementations provide a method and an apparatus for establishing a trusted cluster. The method is used to form a trusted computing cluster by using N trusted computing units, the method including: grouping the N trusted computing units into a plurality of groups; identifying a first trusted computing unit in each group, and causing first trusted computing units in the plurality of groups to each respectively perform inter-unit trust authentication with other trusted computing units in a same group in parallel; performing inter-group trust authentication between/among the plurality of groups in parallel to obtain the N trusted computing units on which trust authentication succeeds; and propagating secret information in the N trusted computing units on which trust authentication succeeds, so that the N trusted computing units obtain the same secret information to form the trusted computing cluster.

Method and apparatus for establishing trusted computing cluster

Some embodiments of the present specification provide a method and an apparatus for establishing a trusted channel between a user and a trusted computing cluster. According to the method, when a user wants to establish a trusted channel with a trusted computing cluster, the user only negotiates a session key with any first trusted computing unit in the cluster to establish the trusted channel. Then, the first trusted computing unit encrypts the session key using a cluster key common to the trusted computing cluster to which the first trusted computing unit belongs, and sends the encrypted session key to a cluster manager. The cluster manager transmits the encrypted session key in the trusted computing cluster, so that other trusted computing units in the cluster obtain the session key and join the trusted channel. Thus, the user establishes a trusted channel with the entire trusted computing cluster.

Method and apparatus for establishing trusted channel between user and trusted computing cluster

A blockchain integrated station receives a startup instruction. The blockchain integrated station sends a signature verification request for a disk image stored in the blockchain integrated station to a cryptographic acceleration card included in the blockchain integrated station. The blockchain integrated station receives a signature verification result from the cryptographic acceleration card, where the signature verification result indicates whether a signature of the disk image passes a verification. In response to determining that the signature verification result indicates that the signature of the disk image passes the verification, the blockchain integrated station executes the disk image.

Trusted startup methods and apparatuses of blockchain integrated station

Implementations of the present application provide data interaction and offline credit payment methods and devices. In one implementation, a credit payment code generated by a server is obtained by scanning and parsing a two-dimensional code presented on a mobile computing device for making a payment. The credit payment code is then decrypted based on asymmetric key decryption to obtain a credit payment token. The credit payment token is parsed to obtain security content included in the credit payment token. The payment associated with the credit payment code is then determined to satisfy the security content and the payment is verified with the server that generates the credit payment code at a predetermined time.

Data interaction method and device, and offline credit payment method and device

The present application discloses a 3,3,3',3&#x2032;-tetramethyl-1,1&#x2032;-spirobiindane-based phosphine ligand, an intermediate, a preparation method and uses thereof. The compound of phosphine ligand is a compound having a structure represented by formula I or formula II, or an enantiomer, a raceme, or diastereomer thereof. The phosphine ligand can be prepared via a preparation scheme in which the cheap and easily available 6,6&#x2032;-dihydroxyl-3,3,3&#x2032;,3&#x2032;-tetramethyl-1,1&#x2032;-spirobiindane is used as a raw material and the compound represented by formula III serves as the key intermediate. The new phosphine ligand developed by the present application can be used in catalytic organic reaction, in particular as a chiral phosphine ligand that is widely used in many asymmetric catalytic reactions including asymmetric hydrogenation and asymmetric allyl alkylation, and thus it has economic practicability and industrial application prospect. 

Compound of 3,3,3',3&#x2032;-tetramethyl-1,1&#x2032;-spirobiindane-based phosphine ligand, and preparation method thereof

The present invention discloses a contactless control device for a range hood and a control method thereof. The contactless control device comprises two sets of infrared gesture sensing devices disposed on the housing of the range hood, and a detected signal analysis device. Each set of infrared gesture sensing devices comprises one infrared receiving device and at least one infrared transmitting device. The distance L between two infrared receiving devices meets the following condition: H*tan(&#x3b8;)+H*tan(&#x3b2;)+W_min&#x3c;L&#x3c;H*tan(&#x3b8;)+H*tan(&#x3b2;)+W_max. It is unnecessary to control the user's gesture sensing distance according to the intensity of the infrared transmitted signals. In this way, it is convenient to adjust the intensity of the infrared transmitted signals, and the infrared receiving device can better detect infrared signals.

Contactless control device for a range hood and control method thereof

A method and an apparatus for information interaction, and a method and an apparatus for associating human biometric data with an account are disclosed. The information interaction method includes: acquiring, when an information interaction operation with a user account of an information interaction party is triggered, human biometric data of a user acting as the information interaction party; suspending the information interaction operation when determining that no matching user account exists according to the human biometric data, and uploading the human biometric data to a server by a device to establish an association relationship between the user account of the user and the human biometric data; and resuming the information interaction operation when a user account matching the human biometric data sent by the server is received, and completing the information interaction operation with the user account matching the human biometric data.

Method and device for information interaction and association between human biological feature data and account

Technologies related to credit payment based on a mobile terminal embedded secure element are disclosed. In an implementation, a payment request is received from a mobile computing device associated with a user account. The payment information including a payment amount is generated based on the payment request. The payment information is then sent to the mobile computing device. A payment authorization encrypted by a private key is received based on asymmetric encryption from the mobile computing device. A public key corresponding to the private key is used to verify the payment authorization, and a transaction log is generated for collecting a payment according to the payment amount if the payment authorization is successfully verified.

Credit payment method and apparatus based on mobile terminal embedded secure element

The present application discloses systems and methods in which sound wave information associated with a data transmission is monitored within a predetermined distance from the client device, where the sound wave information including predetermined security information. In response to detecting sound wave information associated with a data transmission, the sound wave information is parsed to obtain the predetermined security information included in the detected sound wave information. Pattern information is generated based on the predetermined security information and data information to be sent. The generated pattern information is then displayed so that a second device can obtain the generated pattern information.

Data transmission method, data transmitter, data receiver, and system

Technologies related to mobile credit payment are disclosed. In an implementation, a first SNEP Get Request Message is generated and sent to a mobile computing device, in response to a NFC signal received from the mobile computing device. A first SNEP Response Message is received from the mobile computing device and parsed to identify an APP public key license. A pre-stored credit authorization public key is used to verify the APP public key license and an APP public key is retrieved from the APP public key license if the verification is successful. A second SNEP Get Request Message is sent to the mobile computing device and a second SNEP Response Message is received from the mobile computing device. The APP public key is then used to decrypt the second SNEP Response Message, and a transaction log is recorded if the second SNEP Response Message is successfully decrypted.

Credit payment method and apparatus based on mobile terminal peer-to-peer

The present disclosure discloses a method and device for identity authentication. One example method includes retrieving stored fingerprint information for a user including a plurality of recorded fingerprints for the user, each recorded fingerprint associated with a different finger of the user; selecting a subset of the recorded fingerprints to be used to authenticate the user; prompting the user to provide fingerprint information corresponding to each finger associated with a recorded fingerprint in the selected subset; in response to prompting the user, receiving user-provided fingerprint information from the user; matching the user-provided fingerprint information against the selected subset of the recorded fingerprints; and determining that an identity authentication of the user succeeds when the user-provided fingerprint information matches the selected subset of the recorded fingerprints.

Method and device for identity authentication

Growing community of inventors

Hangzhou, China

Lei Wang