Abstract: The present invention relates to a mobile payment device, comprising: a data exchange module, which is used for exchanging data with the external device; a security management module, which is used for installing and managing applications for electronic transactions, the security management module comprises a Security Element, which is used for storing information of user's transaction account; and an identity verification module, which is used for verifying information of user identity; wherein, both the security management module and the identity verification module operates under a Trusted execution environment, the data exchange module operates under a Rich execution environment, the Trusted execution environment and the Rich execution environment being active non-simultaneously. The complete flow of the transaction is under safety protection.

Abstract: A method of data transmission for mobile near-field payment that is performed in a user equipment, comprising: establishing a first communication link based on near-field communication with a POS terminal; after the establishment of the first communication link, establishing a secure channel with the POS terminal, in order to conduct the first interaction related to the transaction request with the POS terminal through the secure channel; establishing a second communication link with the POS terminal, wherein the second communication link has longer communication distance and faster transmission speed compared to the first communication link, and the second communication link is arranged to conduct data transmission in an encryption manner; via the second communication link, the user equipment conducts the second interaction related to the transaction reply with the POS terminal. Also included is a user equipment for mobile near-field payment.

Abstract: The invention discloses a method and terminal device for continuously supplying power to external element. The method comprises the following steps: when a terminal device switches from a first operating system to a second operating system, a proxy external element application is generated in the second operating system so that the proxy external element application is associated with an external element; by means of this proxy external element application, the external element which is associated with the application in the first operating system before the above switch operation is continuously supplied with power after the above switch operation.

Abstract: The application provides a user interest data analysis and collection system which comprises: a session identification module, which is used for offline extracting log data and a merchandise purchase history record corresponding to the log data from a Web server, and for processing the log data, thereby generating a page browsing sequence reference set; a recommendation service controller which is used for collecting user's browsing record in real time; a log data pre-processing module which is used for, when predetermined conditions are satisfied, receiving the user's browsing log data in this session from the recommendation service controller, and for pre-processing the log data; and a match analysis module which is used for matching the pre-processed log data with the generated page browsing sequence reference set, and determining a set of merchandise that the user is potentially interested in, according to the matching result.

Abstract: The present invention relates to specifying commercial district information of merchants, and it pertains to the technical field of data processing. The method for specifying commercial district information of merchants according to the present invention includes the steps of: mining and calculating association rules of consumption and transaction data of consumers so as to obtain information of association between merchants; calculating rates of subordination of merchants whose commercial district information has not been specified to several commercial districts based on the association information and specified commercial district information of at least some of the merchants; and specifying the commercial district information for each of said merchants based on their rates of subordination. The present invention can realize automatic specification of commercial district information of merchants, and the specification of commercial district information is accurate and efficient.

Abstract: The present invention provides a method for evaluating customer value, comprising: establishing a merchant database and cardholders' characteristics libraries, and there being an association relationship between the customer set of the merchant database and the cardholders' characteristics library, such that the data corresponding to a card number may be indexed from the cardholders' characteristics libraries by use of the card number in the customer set; upon receiving a processing request for the cardholder's transaction data, the switching platform processes the transaction data, while acquiring the cardholder's card number and an identity of the merchant which the cardholder consumes at; with the cardholder's card number and the merchant identity, acquiring a characteristics data related to the cardholder from the cardholders' characteristics libraries, and acquiring a data related to the merchant which the cardholder consumes at from the merchant database; determining a basic value information of the car

Abstract: The present invention discloses a NFC-based communication apparatus, comprising: a NFC module set in a trusted execution environment of the communication apparatus, the trusted execution environment being independent of a rich execution environment of the communication apparatus, the NFC module comprises a communication module, which is used for establishing a connection with another NFC apparatus, and a protocol module, which is used for resolving the communication data between the communication apparatus and the another NFC apparatus.

Abstract: The invention discloses a method of dynamically controlling application function at the client, comprising: initiating an application program which merely contains frame function codes; loading a security module after initiating the application program, wherein the security module sends a request regarding scanning configuration file to a server; scanning the application environment of the client according to the configuration file received from the server, and sending the result of scanning to the server so as to generate a risk score; and receiving the function codes that are allowed to be loaded in the current application environment from the server, wherein the function codes are generated by the server based on the generated risk score. The invention also discloses a method of dynamically controlling application function at a server.

Abstract: The application discloses a load evaluation system for virtual machines in a cloud environment, comprising: a monitored data collecting module which is configured to collect monitored data from one or more virtual machines in a cloud data center; a monitored data processing module which is coupled with the monitored data collecting module and is configured to: perform aggregated grouping on the monitored data by using a first KMeans algorithm for each of the one or more virtual machines, each group having a center point coordinate, and calculate a performance characteristic of each virtual machine of the one or more virtual machines according to the grouping and the center point coordinates of individual groups, i.e.

Abstract: The invention provides an automatic health check method for on-line system, comprising the following steps: receiving current status data of the on-line system from the on-line system; updating historical status statistical data based on the current status data, wherein the historical status statistical data is a statistical result for the status data of the on-line system until a previous moment from the moment when the on-line system starts to operate; transmitting the updated historical status statistical data to the on-line system; and the on-line system determining whether it is operating normally according to the updated historical status statistical data. In addition, the present invention correspondingly provides an automatic health check apparatus for on-line system. The method and apparatus according to the present invention can provide an effective and reliable health check mechanism for an on-line system such as bank POS transaction system.

Abstract: The invention relates to communication technology, and in particular, to a method of establishing communication connection between a mobile device and a secure element as well as a mobile device for implementing the method.

Abstract: The invention provides an apparatus used for security information interaction comprising a first system management device for providing an operational environment for routine applications and a second system management device for providing an operational environment in a safe mode for security applications so as to perform a security information interaction process. The apparatus used for security information interaction disclosed by the invention has a high safety and a wide applicability and is low in cost.

Abstract: The present invention proposes a data storage system and method used for the security information interaction. Said data storage system used for the security information interaction comprises a security information storage device, an unlock password generating device and an unlock server. The data storage system and method used for the security information interaction disclosed in the present invention reduce the potential security risks due to the divulgement of unlock passwords, and reduce the complexity of the unlock process, as well as reduce the potential security risks existed in the generating and writing process of the unlock password on the whole.

Abstract: The invention provides a user terminal and a payment system. The user terminal comprises an input device, a multi-channel selection switch, an application module, a processor, a password processing module, and a security IC chip containing information on user's ID and/or banking card therein, wherein the multi-channel selection switch is coupled with the input device, the password processing module and the processor, the password processing module is coupled with the processor, and the security IC chip is coupled with the password processing module; the application module controls the multi-channel selection switch via the processor so as to place the user terminal in a password input mode or in a normal input mode. The invention ensures the safety in entering the user's password in hardware configuration so that even when software system of the user terminal is not safe in itself, the safety of input password can be ensured.

Abstract: A method and system for file type identifying and analyzing, are high in processing efficiency and accuracy, simple in parameter configuring and speedy in analyzing. The method for file type identifying and analyzing is a method for identifying file type read from a database and making an analysis, including the following steps: a loading step for loading file type and file format parameters into a memory; a file reading step for reading files from the memory; a file type identifying step for determining whether the read files are of the file type that can be identified by the memory; a file analyzing step for analyzing files and generating an analysis report in the event that the file type can be identified. The time required for file analysis can be effectively shortened and the accuracy of file identifying and analyzing can be ensured.

Abstract: The invention proposes a virtual machine abnormity recovering method in distributed environment, comprising: running an independent computing assembly on each physical machine on which a virtual machine resides, wherein the computing assembly periodically reports the current running state of the corresponding physical machine to a state database; periodically polling the state database by a highly available controller so as to check the running state of all the physical machines in a physical machine group under the control of the highly available controller; and executing subsequent abnormity processing operation if the running state of only one physical machine in the physical machine group is abnormal so as to ensure that virtual machines on the physical machine whose running state is abnormal continues running normally.

Abstract: The present invention proposes a method for offline upgrading virtual machine mirror images. The method comprises: an mirror image security server collecting virtual machine mirror images, and extracting and storing the information of the collected virtual machine mirror images; and the mirror image security server executing an upgrade operation of virtual machine mirror images in an offline way based on the information of the collected virtual machine mirror images. The method for offline upgrading virtual machine mirror images disclosed in the present invention has higher upgrade efficiency and is capable of upgrading the virtual machine mirror images in an offline way.

Abstract: The present invention proposes a information file generating system and method based on parallel processing. Wherein, said information file generating system based on parallel processing comprises a file request processing device, a control device, a temporary task processing device, an abnormity processing device and an input/output device. Among them, said file request processing device is used to receive and analyze a file request instruction from an application server, and create an information file generation task and at least one temporary information file generation task according to the result of the analysis. The information file generating system and method based on parallel processing disclosed in the present invention are easy to be operated, can ensure the real-time performance and accuracy, and can improve the work efficiency and performance of the system.

Abstract: The present invention is directed to an Ethernet communication method and system which are based on the MMC/SD interface. In the invention, the communication system includes at least one master device and at least one slave device, the at least one master device and the at least one slave device are connected via MMC/SD interface and communicate with each other on the Ethernet. The Ethernet communication method and system disclosed herein enables the device with the MMC/SD interface to act as a node in the network, and thus greatly expanding the application domain of such devices.

Abstract: The present invention relates to the method and the system for initializing secure network access for POS terminals. Said system comprises a terminal backend system and a POS terminal. The POS terminal is provided with: a security module, which was preloaded with a terminal default public key certificate, a private key file, and a CA public key certificate of the terminal backend system in the setting of leaving the factory; a transaction module, which is used for performing the acquiring operation with the following core trading module; and a parameter initializing module, which is used for implementing network access.