Alipay (Hangzhou) Information Technology Co., Ltd.

Advanced New Technologies Co., Ltd.

Alibaba Group Holding Limited

Ant Blockchain Technology (Shanghai) Co., Ltd.

Alipay Information Technology Co., Ltd.

Renhui Yang

Yuan Chen

Shubo Li

Jiawei Liu

Wenyu Yang

Yuqi Lin

Qin Liu

Xinmin Wang

Qin Xiong

Honglin Qiu

Ying Yan

Yuan Cheng

Feng Qian

Qianting Guo

Sheng Zhang

Hanghang Wu

Shanlu Sun

Ping Dai

Examples in this application disclose information sharing methods, media, and systems. One example computer-implemented method includes receiving, by a trusted execution environment (TEE), a first sharing request from a first institution and a second sharing request from a second institution, where the first sharing request comprises a user identity of a first user and first anti-money laundering (AML) risk information and the second sharing request comprises a user identity of a second user and second AML risk information, comparing the user identity of the first user with the user identity of the second user, in response to that the user identity of the first user is the same as the user identity of the second user, combining the first AML risk information and the second AML risk information, and sending the combined first AML risk information and second AML risk information to the first institution and the second institution.

Information sharing methods and systems

Embodiments of the present specification disclose methods, apparatuses, and devices for transferring data assets based on a blockchain. One method includes: obtaining usage demand information of a data requestor for using original data, wherein the usage demand information indicates a demand of the data requestor for performing computations based on the original data; sending a usage authorization request for the original data to a data owner of the original data based on a decentralized identifier (DID) corresponding to the original data; receiving confirmation information of the usage authorization request from the data owner; processing the original data based on the usage demand information to obtain a processing result; transmitting the processing result to the data requestor; and generating a verifiable claim (VC) for recording usage information of the original data.

Methods, apparatuses, and devices for transferring data assets based on blockchain

Embodiments of the present specification disclose matching methods, apparatuses, and devices based on trusted asset data. One method comprises: analyzing trusted asset data of a first entity to obtain asset description information of the first entity, wherein the trusted asset data is stored on a trusted device; obtaining service information of a plurality of second entities; determining target service information that matches the first entity based on the asset description information and the service information; and sending the target service information to the first entity.

Matching methods, apparatuses, and devices based on trusted asset data

Blockchain-based transaction methods, apparatuses and systems are provided. A transaction party invokes a smart contract in a blockchain system to register a digital identity on a blockchain for a digital object in the blockchain system and to write an owner identity of the digital object into a digital identity document of the digital object. If one or more transaction counterparties want to obtain ownership of the digital object, they can invoke the smart contract in the blockchain system to initiate a request of a transaction, further invoke the smart contract in the blockchain system to complete a transaction, determine a new owner of the digital object, and update the owner identity of the digital object on the blockchain.

Blockchain-based transaction methods

Embodiments of the present specification disclose identity registration methods, apparatuses, and devices. One method comprising: identifying description information from a user for a secure application configured to obtain trusted data to be installed; retrieving installation package data corresponding to the secure application based on the description information; installing the secure application in a trusted execution environment (TEE) based on the installation package data; and adding the description information to a digital identity document of the user recorded on a blockchain.

Identity registration methods, apparatuses, and devices

Embodiments of the present specification disclose data processing methods, apparatuses, devices, and media. One method includes the following: receiving a data use request; determining data to be used based on the data use request; determining one or more approvers of the data to be used; sending an approval instruction to the one or more approvers, wherein the approval instruction instructs the one or more approvers to approve the data use request; receiving feedback data from the one or more approvers; and determining that the data use request is approved if the feedback data satisfies a predetermined condition.

Data processing methods, apparatuses, devices, and media

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for blockchain-based cross-entity authentication are provided. One of the methods includes: obtaining an authentication request by a first entity for authenticating a user, wherein the authentication request comprises a decentralized identifier (DID) of the user; in response to determining that the first entity is permitted to access authentication information of the user endorsed by a second entity, generating a blockchain transaction for obtaining an authentication result of the user by the second entity, wherein the authentication result is associated with the DID; and transmitting the blockchain transaction to a blockchain node for adding to a blockchain.

System and method for blockchain-based cross-entity authentication

Examples in this application disclose information sharing computer-implemented methods, media, and systems. One example computer-implemented method includes obtaining, from an external server at a trusted execution environment (TEE), a trigger instruction, in response to obtaining the trigger instruction, combining, at the TEE, first anti-money laundering (AML) risk information provided by a first institution and second AML risk information provided by a second institution to obtain third AML risk information, where the first AML risk information and the second AML risk information correspond to a user identifier, and sending, from the TEE to the first institution, the third AML risk information.

Information sharing methods, apparatuses, and devices

Embodiments of the present specification disclose data processing methods, apparatuses, and devices. A method can include: obtaining data use authorization information sent by a data requester; verifying the data use authorization information; in response to successfully verifying the data use authorization information, sending data authorized to be accessed by the data use authorization information to the data requester, wherein the data is obtained from a trusted institution and is stored in trusted hardware; and storing, on a blockchain associated with a blockchain network, a data sending record for the data.

Data processing methods, apparatuses, and devices

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for blockchain-based decentralized-identifier creation, are provided. One of the methods includes: obtaining a request for creating a decentralized identifier (DID), wherein the request comprises a public key of a cryptographic key pair; creating, based on the public key, a blockchain account associated with a blockchain; creating the DID based on information associated with the blockchain account; and returning a confirmation message comprising the created DID.

System and method for decentralized-identifier creation

Embodiments of the present specification disclose data processing methods, apparatuses, and devices. One method comprises: obtaining an acquisition request for target data of a data owner; determining a trusted application (TAPP) for generating the target data based on decentralized identifier document (DID Doc) information of the data owner in response to the acquisition request; sending, to the TAPP, a target data generation request to use the TAPP to process data of the data owner obtained from a trusted institution; and receiving a processing result from the TAPP in response to the target data generation request.

Embodiments of the present specification disclose trusted hardware-based identity management methods, apparatuses, and devices. One method comprising: determining personal identity information of a user of a trusted hardware; determining hardware identifier information of the trusted hardware; generating a decentralized identifier (DID) binding request based on the personal identity information and the hardware identifier information, wherein the DID binding request is configured to request to establish a corresponding relationship between a DID of the user and the trusted hardware; and sending the DID binding request to a decentralized identity service (DIS).

Trusted hardware-based identity management methods, apparatuses, and devices

Embodiments of the present specification disclose trusted data transmission methods, apparatuses, and devices. One method comprising: identifying a data use request of a data requestor; identifying authorization information of a data owner; generating a data use authorization claim based on the authorization information, wherein the data use authorization claim indicates that the data owner authorizes the data requestor to use data; obtaining initial data based on the data use authorization claim; verifying the initial data to obtain target data that is successfully verified, wherein the target data comprises a data validity claim indicating a validity of the target data; and sending the target data to the data requestor.

Trusted data transmission methods, apparatuses, and devices

Embodiments of the present specification disclose data authorization information acquisition methods, apparatuses, and devices. One method comprises: receiving, from a data requestor and for data, a data use permission application; determining, based on the data use permission application, an approver, wherein the approver is an owner of the data; sending the data use permission application to the approver; receiving acknowledgement information of the approver for receiving the data use permission application; generating data authorization information based on the acknowledgement information; and sending the data authorization information to the data requestor.

Data authorization information acquisition methods, apparatuses, and devices

Embodiments of the present specification disclose data acquisition methods, apparatuses, and devices related to blockchain technologies. One method comprising: publishing, as a published description, a description of target data stored in a trusted device of a data owner; in response to the published description, receiving a data acquisition request from a data requestor for the target data wherein the data acquisition request is configured to retrieve the target data from a first resource; sending the data acquisition request to the data owner; receiving first confirmation information from the data owner; identifying the target data from the trusted device based on the first confirmation information; and sending the target data to the data requestor.

Growing community of inventors

Hangzhou, China

Renhui Yang