Advanced New Technologies Co., Ltd.

Alibaba Group Holding Limited

Alipay Information Technology Co., Ltd.

Yawen Wei

Zhiwei Wang

Qi Huang

Yang Liu

Jianjun Zhang

Hui Liao

Shengbo Zhao

Xiaobo Zhang

Yin Dong

Peng Qiu

This disclosure relates to account management. In one aspect, a method includes receiving a permission query message from a service system. Verification information is obtained from a first client based on the permission query message. The verification information is associated with an identity of the current user. In response to determining that the verification information is valid, proxy permission information for the current user is obtained from a blockchain. The proxy permission information includes at least operation permission information of the current user for the enterprise account. The proxy permission information is sent to the service system. The proxy permission information configured to be usable by the service system to determine whether to authorize the current user to perform an operation on the enterprise account.

Blockchain-based account management

Application information is received by a client and from a server, and the application information includes an application identifier corresponding to a digital certificate application request transmitted by the client to the server. The application information is delivered to a secure element associated with the client by the client. A public and private key pair are generated by the secure element. The application identifier is signed using the private key to generate terminal signature data. Specified format data is generated by encapsulating the terminal signature data and the public key into the specified format data. The specified format data is transmitted from the secure element to the client. The specified format data is transmitted by the client to the server.

Digital certificate application

Implementations of this disclosure provide for certificate application operations. An example method includes sending, from a terminal device, a subscription topic name to a gateway to establish a data transmission channel between the terminal device and the gateway; receiving by the terminal device, via the data transmission channel, a certificate installation instruction from a certificate server; generating, by the terminal device, a user certificate request based on the certificate installation instruction; sending the user certificate request to the certificate server; and receiving, via the data transmission channel, a user certificate from the certificate server.

Certificate application operations

A mapping relationship of a device ID associated with a client, a certificate ID associated with a certificate to be applied by the client during a certificate application process, and identity verification methods to be used to verify the client is stored during the certificate application process. From the client, a request for a certificate to perform a service is received, and the request includes the device ID, an identification verification requirement associated with the service, and the identity verification requirement specifies at least one identity verification method. In response to receiving the request based on the mapping relationship, a certificate ID of an existing certificate that corresponds to the received device ID and satisfies the identity verification requirement is retrieved. In response to retrieving the certificate ID, a certificate response to the client including the retrieved certificate ID is sent.

Digital certificate management

A computer-implemented method includes receiving, by an electronic device, a two-dimensional code generation request from a user operating the electronic device, the electronic device comprising secure element; obtaining, by the electronic device, two-dimensional code generation data, wherein the two-dimensional code generation data comprises account data of the user and timestamp data of the electronic device; obtaining, by the electronic device, signature data based on a predetermined signature algorithm stored in the secure element; and generating, by the electronic device, a target two-dimensional code based on the two-dimensional code generation data and the signature data.

Two-dimensional code generation method, apparatus, data processing method, apparatus, and server

Disclosed herein are methods, systems, and apparatus for cross-chain authentication. One of the methods includes: obtaining an identity confirmation request and a first public key; obtaining an identity verification request and a corresponding identity verification identifier for identity verification of a user associated with the user terminal; sending the identity verification request and the first public key to the user terminal; obtaining digitally signed data, a second public key, and identity verification data; verifying an identity of the user based on the identity verification data; verifying that the first public key and the second public key correspond to the user; and recording authentication data comprising the digitally signed data and the identity verification identifier to a blockchain.

Growing community of inventors

Hangzhou, China

Yawen Wei