Advanced New Technologies Co., Ltd.

Alibaba Group Holding Limited

Xi Sun

Hongwei Luo

Ji Zheng

Yong Pan

Qiaojian Zheng

Jiaqi Feng

Tianshun Lu

Fei Wang

Rui Chen

Junxue Rao

Sanyuan He

Wenting Xu

Jiangbo Xi

Yuedong Weng

Xufeng Deng

Deliang Zhu

Xuelong Wen

Implementations of the present disclosure provide a service processing method, device, and system associated with unified resource locator (URL)-based two-dimensional (code). In an implementation, a URL is received from a first service institution. The URL is obtained by a mobile device from scanning a 2D code provided by a service provider and sent to the first service institution. The URL is then parsed to identify one or more data elements including a service network identifier, a service institution identifier, and a payload including a service object identifier. The one or more data elements is sent to the second service institution based on the service institution identifier. Service information associated with the service object is received from the second service institution based on the service object identifier, and the service information is sent to the first service institution for presenting on the mobile device.

Managing services associated with URL-based two-dimensional codes

The present specification discloses a service authorization method, apparatus and device. In one aspect, the method includes: obtaining, by a first execution unit that runs in a first security environment, information to be verified; generating, by the first execution unit that runs in the first security environment, a verification result of the information to be verified; signing, by the first execution unit that runs in the first security environment, the verification result using a signature verification private key to provide signature information; obtaining, by a second execution unit that runs in a second security environment, the signature information from the first execution unit; verifying, by the second execution unit that runs in the second security environment, the signature information using a signature verification public key corresponding to the signature verification private key; and in response to verifying the signature information, performing service authorization based on the verification result.

Verification-based service authorization

The present application provides an unlocking solution. In this solution, after obtaining a digital key seed, a user mobile device can generate a digital key for multiple times by using the digital key seed and first check data corresponding to a current unlocking operation, and then send the digital key to a smart door lock for verification and unlocking. Because the digital key includes the first check data only corresponding to the current unlocking operation, an attacker cannot use the digital key to perform unlocking again even if the attacker obtains the digital key. In addition, because the digital key seed can be used for multiple times, a smart door lock server does not need to be connected each time to obtain the digital key. Therefore, both security and ease of use are satisfied.

Secure smart unlocking

One embodiment provides a system and method for sharing a security application. During operation, the security application receives a service key associated with a first application executed on a terminal device. The security application resides in a secure element within the terminal device. The security application receives service data associated with the first application; processes the service data based on the service key; and returns the processed service data to the first application, thereby facilitating the first application in performing service based on the processed service data.

Method and mobile terminal of sharing security application in mobile terminal

Methods, systems, and computer-readable storage media for generation of a unified view of the graphical user interface. Implementations include actions of receiving, from a server, structured data of an interface template that is generated by the server by parsing interface template data associated with the interface template. The interface template is identified based on an interface identifier included in the service data. A virtual view node for the widget is determined based on the structured data. The widget is retrieved based on the location information associated with the virtual view node. A unified view of the graphical user interface is generated by rendering the widget with a plurality of widgets associated with the graphical user interface and is displayed on a display device.

Generating a graphical user interface based on formatted structure data

One embodiment provides a key transfer system and method based on a shared security application. During operation, an application executing on a terminal device receives an application key comprising at least a service key from a management server of the application and forwards the application key to a management server of a shared security application residing in a secure element in the terminal device, thereby facilitating the management server of the shared security application to deliver the application key to the shared security application. The application invokes the application key stored in the shared security application to perform services associated with the application. The application key is isolated from other application keys associated with other applications stored in the shared security application.

Key transfer method and system based on shared security application, storage medium, and device thereof

Techniques for generating and processing two-dimensional barcodes are described. One example method includes identifying original content to be encoded in a two-dimensional (2D) barcode structure; and generating a 2D barcode associated with the original content based on at least the 2D barcode structure and the original content, wherein the 2D barcode structure includes at least an identification field and a data field, and the identification field indicates one or more data elements in the data field.

Two-dimensional code generation and processing

The present application provides a facial data collection and verification solution. In this solution, after collecting a face sample, a collection device uses the face sample and check data including a random number as to-be-signed data, performs signature by using a device private key, to obtain a facial data signature, and then obtains trusted facial data based on the to-be-signed data, the facial data signature, and a digital certificate that includes a device public key. When performing verification on the trusted facial data, a facial recognition server sequentially performs verification on the digital certificate that includes the device public key, the facial data signature, and the check data. Because content used for the verification process is added for the face sample on the collection device, subsequent verification cannot succeed if a transmitted communication packet is replaced by an attacker. Therefore, a replay attack is prevented at the collection source.

Growing community of inventors

Hangzhou, China

Xi Sun