A trusted data foundation for the AI era, serving enterprises and individuals alike. One-stop coverage of visitor registration, interview registration, and encryption protection for core data assets; built on zero-knowledge technology to make data usable yet invisible — isolated privacy, end-to-end audit trails, compliance-grade traceability, safeguarding sensitive information for both government & enterprises and individuals.
Scan with AlipayA complete security loop from data collection, encrypted transport to isolated storage. The platform itself cannot decrypt any sensitive data — truly "usable yet invisible, data belongs to the customer, platform stays zero-knowledge".
Supports both the SM2+SM4-GCM national crypto suite and the RSA-2048+AES-256-GCM international standard. Sensitive fields — name, ID, phone, face — are encrypted at the source with customer-owned keys, invisible to the platform throughout.
Park public keys are distributed via X.509 certificates signed by the platform root CA, with SM2 signature verification and certificate revocation checking (CRL). Certificate validity is verified before every encryption to prevent man-in-the-middle attacks and key tampering.
SSL Certificate Pinning + trusted-root public key verification + anti-replay. Security configuration is cached for 24h with auto refresh, ensuring authenticity and integrity of every communication.
Sensitive data — across visitors, interviews and core assets — is envelope-encrypted on the client; customers decrypt with their own keys. The platform only relays and stores ciphertext — it can never access plaintext. Data is usable yet invisible.
Built on the native Alipay mini-program framework with the antd-mini component library, deeply integrated with Alipay authorized login, phone binding, and QR-code login to the PC admin console.
Every API request carries Timestamp + Nonce + HMAC signature; the server validates freshness and uniqueness. Combined with token rotation, intercepted requests cannot be replayed; security configuration supports remote push and dynamic updates.
Transport and application layers are hardened independently, forming a defense-in-depth system. Even if one layer is breached, the other still protects the data.
Transport Layer Security
Application Layer Security
From booking and approval to entry access, from interview registration to encryption protection for core data assets — one platform covering every sensitive-information scenario for both enterprises and individuals.
Three-step form with envelope-encrypted submission. After host-company approval, an access QR code is generated for entry. Supports inviting visitors, reservation history, and cancellation.
Companies generate an interview QR code; candidates scan to self-register. Candidate list management and status tracking — fully paperless.
Beyond registration: core enterprise data assets are envelope-encrypted at the source and decrypted with customer-owned keys — invisible and unusable to the platform, fully auditable.
Dashboard overview + building CRUD + access-point management + device management + security scheduling. Park admins can complete all basic configuration from the mini-program.
Tenant management, enterprise profile maintenance, and park association. Enterprises can review visit records and approve visitor reservations.
Built on the native Alipay framework with antd-mini components from Ant Design, embedding both national and international encryption suites to meet financial-grade security standards.
Component2 mode
v2.4.0 library
SM2 / SM3 / SM4
RSA + AES-256-GCM
jsrsasign v11
SHA-256 signing
bigpeng-java
v2.2.5
The Qingniu Dunan zero-knowledge platform — built to MLPS Level 3, national-grade encryption, data usable yet invisible
