# US 2019/0245684 A1 · Method, apparatus, and system for processing two-dimensional barcodes > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2019/0245684 A1 - Document ID: US20190245684A1 - Status: Published application - Kind: A1 - Application number: 16/384,607 - Filed: 2019-04-15 - Published: 2019-08-08 - Earliest claimed: 2016-12-14 - Assignees: Alibaba Group Holding Limited - Applicants: Alibaba Group Holding Limited - Inventors: Lingnan Shen; Ge Chen; Yanghui Liu; Huifeng Jin - Web page: https://patentgrep.com/patent/US20190245684A1 ## CPC - H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates} - G06F 21/36: by graphic or iconic representation - G06K 19/06037: {multi-dimensional coding} - G06K 19/10: at least one kind of marking being used for authentication, e.g. of credit or identity cards (verification of coded identity or credit cards in mechanisms actuated by them G07F7/12) - H04L 9/3247: {involving digital signatures} - H04L 63/108: {when the policy decisions are valid for a limited amount of time} - H04L 63/123: {received data contents, e.g. message integrity} - H04L 63/126: {the source of the received data} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06K: GRAPHICAL DATA READING (image or video recognition or understanding G06V); PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS ## Abstract This specification describes techniques for processing service requests. One example method includes receiving an electronic credential request from a client, retrieving an electronic credential that corresponds to the user identifier, generating server signature information, and transmitting the server signature information and the electronic credential to the client. The server signature information includes the electronic credential and a user public key of the client. The electronic credential and the user public are signed using a server private key. The server signature information is configured to be cryptographically verified by the client and configured to enable the client to generate a two-dimensional barcode based on the electronic credential. The electronic credential included in the two-dimensional barcode is configured to be verified by a credential verification device. The credential verification end device is configured to generate the electronic credential based on the user identifier. ## Claims ### Claim 1 A computer-implemented method for processing service requests, the computer-implemented method comprising: receiving, by one or more processors, an electronic credential request from a client, wherein the electronic credential request comprises a user identifier; retrieving, by the one or more processors, an electronic credential that corresponds to the user identifier; generating, by the one or more processors, server signature information, wherein the server signature information comprises the electronic credential and a user public key of the client, and wherein the electronic credential and the user public are signed using a server private key; and transmitting, by the one or more processors, the server signature information and the electronic credential to the client, wherein the server signature information is configured to be cryptographically verified by the client and configured to enable the client to generate a two-dimensional barcode based on the electronic credential, wherein the electronic credential included in the two-dimensional barcode is configured to be verified by a credential verification device, and wherein the credential verification device is configured to generate the electronic credential based on the user identifier. ### Claim 2 (depends on 1) The computer-implemented method of claim 1, wherein signing the electronic credential using the server private key comprises: allocating a user signature key to the electronic credential, and signing the electronic credential and a first user public key by using the server private key, wherein the user signature key comprises the first user public key. ### Claim 3 (depends on 1) The computer-implemented method of claim 1, wherein signing the electronic credential using the server private key comprises: obtaining a second user public key sent by the client, and signing the electronic credential and the second user public key by using the server private key. ### Claim 4 (depends on 2) The computer-implemented method of claim 2, wherein the user signature key is an asymmetric key. ### Claim 5 (depends on 3) The computer-implemented method of claim 3, wherein the first user public key is signed by using the server private key, transmitting the server signature information and the electronic credential to the client comprises: transmitting the allocated user signature key, the server signature information, and the electronic credential to the client. ### Claim 6 (depends on 1) The computer-implemented method of claim 1, further comprising: determining a service validity time based on the electronic credential request; and verifying whether the service validity time complies with a service specification. ### Claim 7 (depends on 6) The computer-implemented method of claim 6, wherein the service validity time of the predetermined security information is based on a type of the electronic credential. ### Claim 8 (depends on 1) The computer-implemented method of claim 1, wherein signing the electronic credential and the user public key comprises: performing a hash operation on the user public key and the electronic credential by using a hash algorithm to obtain a hash value; and signing the hash value by using the server private key to obtain the server signature information. ### Claim 9 A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising: receiving an electronic credential request from a client, wherein the electronic credential request comprises a user identifier; retrieving an electronic credential that corresponds to the user identifier; generating server signature information, wherein the server signature information comprises the electronic credential and a user public key of the client, and wherein the electronic credential and the user public are signed using a server private key; and transmitting the server signature information and the electronic credential to the client, wherein the server signature information is configured to be cryptographically verified by the client and configured to enable the client to generate a two-dimensional barcode based on the electronic credential, wherein the electronic credential included in the two-dimensional barcode is configured to be verified by a credential verification device, and wherein the credential verification device is configured to generate the electronic credential based on the user identifier. ### Claim 10 (depends on 9) The non-transitory, computer-readable medium of claim 9, wherein signing the electronic credential using the server private key comprises: allocating a user signature key to the electronic credential, and signing the electronic credential and a first user public key by using the server private key, wherein the user signature key comprises the first user public key. ### Claim 11 (depends on 9) The non-transitory, computer-readable medium of claim 9, wherein signing the electronic credential using the server private key comprises: obtaining a second user public key sent by the client, and signing the electronic credential and the second user public key by using the server private key. ### Claim 12 (depends on 10) The non-transitory, computer-readable medium of claim 10, wherein the user signature key is an asymmetric key. ### Claim 13 (depends on 12) The non-transitory, computer-readable medium of claim 12, wherein the first user public key is signed by using the server private key, transmitting the server signature information and the electronic credential to the client comprises: transmitting the allocated user signature key, the server signature information, and the electronic credential to the client. ### Claim 14 (depends on 9) The non-transitory, computer-readable medium of claim 9, further comprising: determining a service validity time based on the electronic credential request; and verifying whether the service validity time complies with a service specification. ### Claim 15 A computer-implemented system, comprising: one or more computers; and one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising: receiving an electronic credential request from a client, wherein the electronic credential request comprises a user identifier; retrieving an electronic credential that corresponds to the user identifier; generating server signature information, wherein the server signature information comprises the electronic credential and a user public key of the client, and wherein the electronic credential and the user public are signed using a server private key; and transmitting the server signature information and the electronic credential to the client, wherein the server signature information is configured to be cryptographically verified by the client and configured to enable the client to generate a two-dimensional barcode based on the electronic credential, wherein the electronic credential included in the two-dimensional barcode is configured to be verified by a credential verification device, and wherein the credential verification device is configured to generate the electronic credential based on the user identifier. ### Claim 16 (depends on 15) The computer-implemented system of claim 15, wherein signing the electronic credential using the server private key comprises: allocating a user signature key to the electronic credential, and signing the electronic credential and a first user public key by using the server private key, wherein the user signature key comprises the first user public key. ### Claim 17 (depends on 15) The computer-implemented system of claim 15, wherein signing the electronic credential using the server private key comprises: obtaining a second user public key sent by the client, and signing the electronic credential and the second user public key by using the server private key. ### Claim 18 (depends on 16) The computer-implemented system of claim 16, wherein the user signature key is an asymmetric key. ### Claim 19 (depends on 18) The computer-implemented system of claim 18, wherein the first user public key is signed by using the server private key, transmitting the server signature information and the electronic credential to the client comprises: transmitting the allocated user signature key, the server signature information, and the electronic credential to the client. ### Claim 20 (depends on 15) The computer-implemented system of claim 15, further comprising: determining a service validity time based on the electronic credential request; and verifying whether the service validity time complies with a service specification.