Huawei Technologies Co., Limited

Huawei Device Co., Ltd.

Huawei Device (Dongguan) Co., Ltd.

Snaptrack Incorporated

Xinmiao Chang

Xiaona Zhao

Guoqing Li

Jingqing Mei

Zhihao Jin

Haitao Liu

Miao Wang

Sishan Wang

Yue Song

Xiaojuan Li

Chen Dong

Huiping Zhang

Zi Wang

Huangwei Wu

Rui Wang

Qiang Yi

Jianxin Ding

Zhuofei Li

Zhe Zhu

Peng Zhang

Xianwen Hua

Haitao Lui

A capability enabling method and apparatus. A secure element (SE) establishes, with a trusted execution environment (TEE), a session for communication. The SE sends, to the TEE, an obtaining instruction to obtain a security certificate of the TEE. After receiving the obtaining instruction, the TEE generates the security certificate based on attribute information of the TEE, and sends the generated security certificate to the SE. After the SE receives the security certificate, the SE determines, based on the security certificate and a preset security policy, that the TEE is in a secure state. After the SE determines that the TEE is in the secure state, the SE enables a first capability for a third-party service in the SE based on a second capability of the TEE.

Capability enabling method and apparatus

An emulated card selection method is implemented on a mobile device having a near field communication (NEC) NFC function. A first emulated card and a second emulated card are configured on the mobile device, When detecting an NFC radio frequency field, the mobile device detects whether there is fingerprint input. The mobile device selects the first emulated card if there is the fingerprint input. The mobile device selects the second emulated card if there is no fingerprint input. The mobile device performs NEC interaction with the NFC card reader based on the selected first emulated card or second emulated card. The mobile device can automatically select an emulated card in different emulated cards based on a card swiping status when a user uses an NEC emulated card.

Emulated card selection method and mobile device

An order processing method comprising: obtaining first order information and order sharing condition information, and generating an order sharing invitation message according to the first order information and the order sharing condition information; receiving an answer message returned by a target terminal according to the order sharing invitation message, and obtaining, according to the answer message, second order information and an acknowledged data transfer state indicated by the second order information; performing combination processing on the first order information and the second order information according to the acknowledged data transfer state returned by the target terminal, and generating settlement order information; and performing settlement on the settlement order information according to the order sharing condition information when the settlement order information meets an order sharing condition indicated by the order sharing condition information.

Order processing method and terminal

An interaction method includes receiving a service request from a client application (CA) installed on a terminal and that runs in a rich execution environment (REE), determining a trusted user interface (TUI) identifier, sending a TUI call instruction carrying the TUI identifier to a trusted execution environment (TEE) to instruct to draw an image based on the TUI template or the TUI function component to call a TUI to display the drawn image, receiving response information from the TEE, and executing a corresponding service procedure based on the response information.

Interaction method and apparatus

A face recognition-based method includes, when a terminal detects a placement posture on the terminal, obtaining placement posture information of the terminal, where the placement posture information is used to determine a tilt angle of the terminal relative to a first plane; performing facial recognition on a user when determining that a tilt angle meets a preset range without notifying the user and regardless of detecting an action of the terminal other than obtaining the placement posture information; and opening the application when the facial recognition succeeds.

Facial recognition-based payment method, apparatus, and terminal

A method includes sending, by a trusted application (TA) entity, a certificate of the TA entity and a private key signature of the TA entity to a target security domain (SD). The certificate and the private key signature enable the target SD to perform trust verification via a server, obtaining, by the TA entity, a first key of the target SD when the trust verification of the TA entity succeeds, and establishing, by the TA entity, a trust relationship with the target SD.

Data processing method and apparatus

A data processing method includes determining whether a first conflicting application related to a first conflicting peripheral is in a whitelist, independently taking over the first conflicting peripheral in response to the first conflicting application being in the whitelist, where the first conflicting application runs in a rich execution environment (REE), and sending data generated by the first conflicting peripheral to the first conflicting application in response to a trusted user interface (TUI) being displayed.

Data processing method and terminal

An NFC payment method includes: displaying, by a first terminal, a third-party payment application based on a preset trigger condition; and interacting with a second terminal by using the third-party payment application, to complete NFC payment.

NFC payment method and terminal

An authorization credential migration method includes: sending, by a first terminal device, an authorization credential immigration request for a trusted application to a service server; receiving an entered second authorization verification code of the trusted application; sending, by the first terminal device, the second authorization verification code to the service server, to instruct the service server to perform authorization authentication; and receiving, by the first terminal device, an authorization credential of the trusted application that is sent by the service server.

Authorization credential migration method, terminal device, and service server

Embodiments of the present invention relate to a trusted application access control method and a terminal. The method includes: receiving, by a terminal in a TEE, a request for accessing a target trusted application (TA) that is sent by a client application (CA); determining, by the terminal, a service level of the CA in a trusted execution environment (TEE) based on the request for accessing the target TA; and providing, by the terminal in the TEE by using the target TA, a service corresponding to the service level for the CA. In this way, the target TA provides different levels of services for the CA, and determines, in the TEE, the service level corresponding to the CA, thereby enhancing constraint and limitation of accessing the target TA by the CA, and improving security of accessing the target TA by the CA.

Trusted application access control method and terminal

An application program authorization method includes: when a first application on a terminal is logged into, sending, by the terminal to a first application server by using the first application, a first request message used for negotiating a token binding identifier of the first application; receiving, by the terminal, a first response message including generation information of the token binding identifier from the first application server; generating, by the terminal, the token binding identifier based on the generation information of the token binding identifier, and sending the token binding identifier to the first application server; and when the at least one second application on the terminal logs in by using the first application, sending, by the terminal to the first application server, a second request message, where the second request message includes the token binding identifier.

Application program authorization method, terminal, and server

A method is applied to a first terminal, the first terminal includes a main processor and an NFC chip, and a first SE is integrated into and/or an HCE application is run on the main processor. The method includes: when the main processor of the first terminal is powered off, receiving, by the first terminal, an application selection instruction sent by a second terminal, where the application selection instruction is used to instruct to process an NFC service by using an application in the first SE or the HCE application; and after receiving the application selection instruction, controlling, by the first terminal, the main processor to be powered on, and routing the application selection instruction to the main processor, so that the main processor processes the NFC service.

NFC service processing method, terminal, and NFC chip

A method includes determining, by an NFCC of a first NFC device, whether the NFCC is responsible for determining a maximum length value of data packets transmitted in subsequent communication. The method further includes sending a first request comprising a first length value to a second NFC device when the NFCC is responsible for determining the maximum length value. The first request further includes a first DID. The method further includes receiving a first response that is returned by the second NFC device for the first request and that comprises a second DID. The method further includes using the first length value as the maximum length value of the data packets transmitted in the subsequent communication when the first DID is the same as the second DID.

Method, device, and system for adjusting packet length in near field communication

A terminal installs, according to a type of an HCE application, the HCE application in a terminal environment corresponding to the type of the HCE application. The terminal parses a first identifier of the HCE application and a second identifier included in the HCE application, where the first identifier identifies the HCE application in the terminal, and the second identifier identifies a message flow between a card reading device and the HCE application. The terminal registers routing information of the HCE application with the TEE, where the routing information includes the first identifier, the second identifier, and the terminal environment in which the HCE application is installed. An HCE application with two different security levels, a TEE and an REE, is supported on a terminal.

Method and terminal for implementing host card emulation, and data routing method and apparatus

Embodiments of the present invention provide a security indication information configuration method and device, to reduce a risk of attack and interception from malicious software. The method includes: detecting, by a terminal, whether universal security indication information is set in the terminal for a TUI; detecting a running status of the terminal if no universal security indication information is set; when it is detected that the running status of the terminal is a secure state, presenting a first input interface on a display by using a first information presentation interface; and receiving input universal security indication information by using the first input interface, and saving the universal security indication information to a trusted execution environment TEE of the terminal.

Growing community of inventors

Beijing, China

Xinmiao Chang