Alibaba Group Holding Limited

Datang Mobile Communications Equipment Co., Ltd.

Beijing Qihoo Technology Company Limited

Beijing Chunlizhengda Medical Instruments Co., Ltd.

Peng Xiao

Yingfang Fu

Tao Duan

Jun Xiong

Huarong Sun

Jieli Wang

Ce Wang

Dezhi Li

Ming Xiang

Rui Xiao

Gan Ning

Fengbao Xie

Chunlin Shen

Xiangxiang Xu

Chunbao Shi

The method includes receiving a challenge request sent by a first service trusted server and obtaining to-be-verified information of the first service trusted server in the challenge request; sending a verification request to a trusted remote proving server, wherein the verification request includes the to-be-verified information of the first service trusted server; and obtaining a verification response returned by the trusted remote proving server.

Trusted remote proving method, apparatus and system

Methods, apparatuses, systems, storage media, and computing devices for updating a measurement are disclosed. One of the methods includes: detecting that an application device initiates a measurement update, wherein the measurement update includes at least one of: an object update that updates a measurement object, and a policy update that updates a policy; and performing measurement update processing upon verifying that the measurement update satisfies a predetermined condition, wherein the measurement update processing includes performing an update process on at least one of content included in an execution of a measurement process, and wherein the measurement process includes calculating a measurement object using a predetermined algorithm, comparing a calculation result with a pre-stored verification reference value, and determining that an integrity of the measurement object is not corrupted if a comparison result is consistent.

Measurement update method, apparatus, system, storage media, and computing device

A data processing method based on an integrated chip is provided. The method includes providing computing information of a trusted computing chip to a high-speed encryption chip, and invoking the high-speed encryption chip to perform data encryption or trusted computing based on the computing information. As such, after these two types of chips are integrated, these two types of secure computing (the trusted computing and the data encryption) can share common computing information. Compared with using individual sets of computing information before integration, corresponding hardware and management costs are reduced. Moreover, the trusted computing chip is superior to the high-speed encryption chip in terms of functional integrity and reliability for data encryption functions. Storing the computing information by the trusted computing chip can improve the security of the data encryption. For trusted computing functions, the utilization of the computing power of the high-speed encryption chip is increased, and the computational efficiency of the trusted computing is improved.

Integrated-chip-based data processing method, computing device, and storage media

Measurement methods, devices and systems based on a trusted high-speed encryption card are disclosed. One of the methods includes: a BIOS actively measuring at least one firmware in a device if an integrity measurement result made by a trusted security chip for the BIOS indicates that the integrity thereof is not corrupted; loading one or more firmware if the integrity of the one or more firmware in the device actively measured by the BIOS is not corrupted; and forbidding a system of the device from being started or controlling the system to enter into a non-secure mode if the integrity of one or more firmware in the device actively measured by the BIOS is corrupted.

Measurement methods, devices and systems based on trusted high-speed encryption card

Identity information processing method and apparatus are disclosed. The method includes: obtaining customized information of a user process on an integrated chip; determining a target operational firmware preloaded on a reconfigurable chip according to the customized information; generating first process identity information used for verifying the user process based on the target operational firmware and a fixed operational firmware of a non-reconfigurable chip; and providing the first process identity information to a privacy certificate issuing authority for performing firmware legitimacy verification of an operational firmware to determine that an identity of the user process is legitimate according to a result of the firmware legitimacy verification. Therefore, the first process identity information generated for the user process by the integrated chip can prove the legitimacy of the fixed operational firmware of the non-reconfigurable part of the firmware, and also prove the legitimacy of the target operational firmware of the reconfigurable part.

Key and certificate distribution method, identity information processing method, device, and medium

A method including a security chip receiving a cryptographic operation request; the security chip acquiring a measurement result, wherein the measurement result is a result of measuring a dynamic measurement module in a cryptographic operation module by using a platform measurement root; and the security chip starting a cryptographic operation when determining that the measurement result is identical to a pre-stored standard value. The present disclosure solves a technical problem of failure to guarantee a dynamic trust for measurement code when starting dynamic measurement of a cryptographic operation.

Measurement processing of high-speed cryptographic operation

A trusted measuring method including: measuring, by a trusted platform control module, itself after being powered on; measuring, by the trusted platform control module, a high-speed encryption/decryption module when the measurement of the trusted platform control module by itself is valid; and measuring, by the trusted platform control module in combination with the high-speed encryption/decryption module, the integrity of a platform and a system when the measurement of the high-speed encryption/decryption module by the trusted platform control module is valid. The measuring process includes: calculating a measurement object by using a predetermined algorithm, comparing the calculation result with a pre-stored verification reference value, and determining that the integrity of the measurement object is not destroyed if the comparison result is consistent. The present disclosure solves the technical problems of low performance of trusted measurement, insensitiveness to attack risks, and information leakage risks in conventional techniques.

Trusted measuring method, apparatus, system, storage medium, and computing device

A method, an apparatus, a system and a computing system for policy deployment of a trusted server are provided. The method includes sending a metric policy of at least one metric object and a verification policy of at least one verification object in a process of policy deployment of a trusted server to a service center; the trusted server receiving reminder information returned by the service center, wherein the reminder information is used for representing a reminder to the trusted server to redeploy a metric algorithm and a verification algorithm that are consistent if a metric algorithm of a metric object is detected to be inconsistent with a verification algorithm of a corresponding verification object. The present disclosure solves the technical problems of poor independence and flexibility due to the use of a same metric algorithm for all metric objects by existing trusted server policy management solutions.

Policy deployment method, apparatus, system and computing system of trusted server

A BIOS (Basic Input/Output System) flashing method and a BIOS image file processing method, belonging to the field of computers, are provided. The methods include: obtaining a BIOS image file, the BIOS image file carrying a first verification parameter and a first file parameter, verifying that the first verification parameter has validity, verifying that the BIOS image file has completeness based on the first file parameter; and performing BIOS flashing employing the BIOS image file verified as having completeness. The present disclosure may improve security and reliability of data servers.

BIOS flashing method and BIOS image file processing method

A method including obtaining a BIOS image file carrying a private key signature of the BIOS management server, verifying that the BIOS image file has validity according to a public key of the BIOS management server, and verifying that the BIOS image file has integrity according to the pre-stored first file parameter. If both the validity and integrity of the BIOS image file are verified, the BIOS is started. This present disclosure improves the security and reliability of the data server.

BIOS startup method and data processing method

A bone trabecular fusion cage for implanting into an intervertebral disc is disclosed. The fusion cage includes a bone trabecular housing made of titanium alloy powder material with trabecular housing accommodation space therein. A side wall of the bone trabecular housing is provided with a plurality of pores, and sclerotin can grow into the bone trabecular housing through the pores to securely fix the bone trabecular fusion cage in the intervertebral disc; and a liner made of polyether-ether-ketone material and fixed in the accommodating space of the bone trabecular housing, wherein the polyether-ether-ketone liner gpores can provide good elastic modulus of bone. With the product of the present disclosure, bone implantation is not required, the patient recovers fast, and excellent fusion effect can be obtained.

Bone trabecular fusion cage

Disclosed is a DPD system. A DPD system provided in an embodiment of the present invention includes a table look-up unit and a DPD processing unit. First to Nth look-up-tables are used to combine two bit sequences of bit sequences obtained according to first to fourth address conversion tables so as to obtain first to Nth table look-up addresses. First to Nth DPD coefficients are found according to the first to Nth table look-up addresses, and one DPD coefficient is obtained via a DPD coefficient combination module, such that the DPD processing unit can perform DPD processing on a signal in first band according to the DPD coefficient. In the embodiment of the present invention, a look-up address is obtained according to four address conversion tables, a DPD coefficient is obtained from a look-up-table according to the look-up address, and then a final DPD coefficient is obtained to perform signal processing. Thereby, a look-up address generation solution is provided for a multi-band DPD system to realize multi-band DPD processing.

DPD system

The invention is a method and a system for updating pre-distortion coefficients, which is used to solve the problem of interference with neighbor cells due to the inferior pre-distortion coefficients. The method includes: presetting a primary table and a standby table, which store default and updated pre-distortion coefficients respectively; when a data source of a pre-distortion processor adopts the standby table, adopting the updated pre-distortion coefficients to perform parameter output processing to acquire pre-distortion parameters, and conveying the pre-distortion parameters and an input signal to the pre-distortion processor to process to acquire pre-distortion signals; conveying the pre-distortion signals through various signal processors to acquire a first signal, and determining the power data of the first signal; and based on the comparing result of the power data of the first signal and a setting range, there are different actions.

Method and system for updating predistortion coefficient

The present invention discloses a method and a device for prompting information about an e-mail. The method comprises: extracting information from a currently opened e-mail; according to the extracted information, determining whether an unsafe webpage link is contained in content of the currently opened e-mail; and if yes, providing security prompting information to a user. By means of the present invention, security is ensured when a person uses an e-mail box.

Growing community of inventors

Beijing, China

Peng Xiao