公开(公告)号：US20200235945A1

公开(公告)日：2020-07-23

申请号：US16648126

申请日：2017-09-18

Applicant: Huawei Technologies Co., Ltd.

Inventor： Guoqing Li ,  Xinmiao Chang ,  Jingqing Mei ,  Sishan Wang

IPC: H04L9/32 ,  H04L9/08

Abstract: A method includes sending, by a trusted application (TA) entity, a certificate of the TA entity and a private key signature of the TA entity to a target security domain (SD). The certificate and the private key signature enable the target SD to perform trust verification via a server, obtaining, by the TA entity, a first key of the target SD when the trust verification of the TA entity succeeds, and establishing, by the TA entity, a trust relationship with the target SD.

公开(公告)号：US10681509B2

公开(公告)日：2020-06-09

申请号：US15570600

申请日：2015-04-30

Applicant: Huawei Technologies Co., Ltd.

Inventor： Jingqing Mei ,  Xinmiao Chang

IPC: H04W4/20 ,  H04W8/00 ,  H04W76/10 ,  H04W76/14 ,  H04W4/50 ,  H04W4/80 ,  H04W84/18

Abstract: The present invention provides a service processing method and a terminal, and relates to the communications field, so as to display an intention (intention), so that a user can freely select a to-be-executed intention. A first communications terminal determines L intentions, where both the first communications terminal and a second communications terminal support an application, the application supports the L intentions, and L is an integer greater than or equal to 1; the first communications terminal displays at least one of the L intentions; the first communications terminal determines a to-be-executed intention according to a trigger operation of a user; and the first communications terminal transmits data corresponding to the to-be-executed intention to the second communications terminal.

公开(公告)号：US10659360B2

公开(公告)日：2020-05-19

申请号：US16422537

申请日：2019-05-24

Applicant: Huawei Technologies Co., Ltd.

Inventor： Xinmiao Chang ,  Jingqing Mei ,  Xiaona Zhao

IPC: H04L12/28 ,  H04L12/741 ,  H04B5/00 ,  H04W88/02 ,  H04W4/80 ,  H04L12/781

Abstract: Embodiments of the present invention provide a routing method, a near field communication controller, a device host, and a terminal, where the method is used in a first terminal, the first terminal includes a device host DH, a near field communication controller NFCC, and at least one near field communication execution environment NFCEE, and the method includes: receiving, by the NFCC, a data frame sent by a second terminal; determining, by the NFCC, whether a default-NFCEE-based routing manner is used to search for a matched routing entry for the data frame; if yes, determining, by the NFCC, a target NFCEE according to the default-NFCEE-based routing manner, so that the NFCC routes the data frame to the target NFCEE.

公开(公告)号：US10333844B2

公开(公告)日：2019-06-25

申请号：US15515545

申请日：2014-09-30

Applicant: Huawei Technologies Co., Ltd.

Inventor： Xinmiao Chang ,  Jingqing Mei ,  Xiaona Zhao

IPC: H04L12/28 ,  H04L12/741 ,  H04B5/00 ,  H04W88/02 ,  H04W4/80 ,  H04L12/781

Abstract: Embodiments of the present invention provide a routing method, a near field communication controller, a device host, and a terminal, where the method is used in a first terminal, the first terminal includes a device host DH, a near field communication controller NFCC, and at least one near field communication execution environment NFCEE. The method includes receiving, by the NFCC, a data frame sent by a second terminal and determining, by the NFCC, whether a default-NFCEE-based routing manner is used to search for a matched routing entry for the data frame. The method also includes if yes, determining, by the NFCC, a target NFCEE according to the default-NFCEE-based routing manner, so that the NFCC routes the data frame to the target NFCEE.

公开(公告)号：US10103783B2

公开(公告)日：2018-10-16

申请号：US15580269

申请日：2015-06-30

Applicant: HUAWEI TECHNOLOGIES CO., LTD.

Inventor： Xiaona Zhao ,  Jingqing Mei ,  Xinmiao Chang

IPC: H04B5/00 ,  H04W8/00 ,  H04W88/02 ,  H04W4/80

Abstract: Embodiments described in the present disclosure disclose a radio frequency discovery method that relates to a first device and a second device. At least two applications are installed on the first device. After a user selects a first application from the at least two applications, a near field communication controller in the first device obtains an RF technology supported by the first application; determines at least one to-be-used RF technology in information indicating the RF technology supported by the first application; then receives a detection command sent by the second device for a first RF technology; and when the to-be-used RF technology includes the first RF technology, sends a response message for the detection command to the second device; or when the to-be-used RF technology does not include the first RF technology, determines not to send a response message for the detection command.

公开(公告)号：US20180004736A1

公开(公告)日：2018-01-04

申请号：US15541266

申请日：2015-01-04

Applicant: Huawei Technologies Co., Ltd.

Inventor： Xiaona Zhao ,  Xinmiao Chang ,  Guoqing Li

IPC: G06F17/30 ,  H04L29/08

Abstract: The present invention provides a data update method, an apparatus, and an eUICC. The method is applied to an eUICC in which a management apparatus and at least one SE are disposed, where the at least one SE is configured to store an application corresponding to at least one profile. The management apparatus receives a profile enabling request, where the enabling request is used to switch a source profile to a target profile, the enabling request includes identifier information of the target profile, and the source profile is a profile that is in an enabled state before the switching; and updates a first correspondence to a second correspondence according to the enabling request; and the second correspondence is a correspondence between a second application set and the target profile, and the second application set includes at least one application in the first application set.

公开(公告)号：US11411956B2

公开(公告)日：2022-08-09

申请号：US16464089

申请日：2016-11-24

Applicant: Huawei Technologies Co., Ltd.

Inventor： Guoqing Li ,  Jingqing Mei ,  Xinmiao Chang

IPC: H04L29/06 ,  H04L9/40 ,  H04W4/80 ,  H04W12/08 ,  G06F9/445 ,  H04W12/69

Abstract: A data processing method includes determining whether a first conflicting application related to a first conflicting peripheral is in a whitelist, independently taking over the first conflicting peripheral in response to the first conflicting application being in the whitelist, where the first conflicting application runs in a rich execution environment (REE), and sending data generated by the first conflicting peripheral to the first conflicting application in response to a trusted user interface (TUI) being displayed.

公开(公告)号：US11379573B2

公开(公告)日：2022-07-05

申请号：US16629948

申请日：2017-10-27

Applicant: HUAWEI TECHNOLOGIES CO., LTD.

Inventor： Guoqing Li ,  Xinmiao Chang

IPC: G06F21/44 ,  G06F21/60 ,  G06F21/62

Abstract: Embodiments of the present invention relate to a trusted application access control method and a terminal. The method includes: receiving, by a terminal in a TEE, a request for accessing a target trusted application (TA) that is sent by a client application (CA); determining, by the terminal, a service level of the CA in a trusted execution environment (TEE) based on the request for accessing the target TA; and providing, by the terminal in the TEE by using the target TA, a service corresponding to the service level for the CA. In this way, the target TA provides different levels of services for the CA, and determines, in the TEE, the service level corresponding to the CA, thereby enhancing constraint and limitation of accessing the target TA by the CA, and improving security of accessing the target TA by the CA.

公开(公告)号：US11233649B2

公开(公告)日：2022-01-25

申请号：US16471748

申请日：2017-03-30

Applicant: Huawei Technologies Co., Ltd.

Inventor： Guoqing Li ,  Xinmiao Chang

IPC: H04L9/32 ,  H04L9/08 ,  H04L9/14 ,  H04L9/30

Abstract: An application program authorization method includes: when a first application on a terminal is logged into, sending, by the terminal to a first application server by using the first application, a first request message used for negotiating a token binding identifier of the first application; receiving, by the terminal, a first response message including generation information of the token binding identifier from the first application server; generating, by the terminal, the token binding identifier based on the generation information of the token binding identifier, and sending the token binding identifier to the first application server; and when the at least one second application on the terminal logs in by using the first application, sending, by the terminal to the first application server, a second request message, where the second request message includes the token binding identifier.

公开(公告)号：US11100227B2

公开(公告)日：2021-08-24

申请号：US15779090

申请日：2015-11-25

Applicant: HUAWEI TECHNOLOGIES CO., LTD.

Inventor： Guoqing Li ,  Xinmiao Chang ,  Zi Wang

IPC: G06F21/60 ,  G06F21/57 ,  H04W8/18 ,  H04M1/7243 ,  H04M1/72448 ,  G06F21/44 ,  G06F21/56 ,  G06F21/71 ,  H04L29/06 ,  G06F21/74

Abstract: Embodiments of the present invention provide a security indication information configuration method and device, to reduce a risk of attack and interception from malicious software. The method includes: detecting, by a terminal, whether universal security indication information is set in the terminal for a TUI; detecting a running status of the terminal if no universal security indication information is set; when it is detected that the running status of the terminal is a secure state, presenting a first input interface on a display by using a first information presentation interface; and receiving input universal security indication information by using the first input interface, and saving the universal security indication information to a trusted execution environment TEE of the terminal.