Mobile Transportation SDK for 福建出行助手

Designed a transportation iOS SDK by using QR code scanning for 福建出行助手.

App Store Link: 
https://tinyurl.com/y73n9bpt

Technical Stack:

• Ionic and AngularJS
• White-box cryptography (Protect the data between client and server)
• Anti-hooking (Personal Implementation)
• Integrated Alipay and Wechat payment by using Paymax SDK (拉卡拉).
• iOS Core Data with Encryption Layer
• Obfuscate the data stored in User Defaults and Key Chain
• QR Code Display and Scan
• Core Graphics
• MQTT notification
• URL Schemes

Screenshots:

Provisioning Factory for Hardware TEE

A mobile digital Car Key SDK by using Hardware TEE (Trusted Execution Environment) technology, used as Digital Card Keys to operate your car.

Technical Stack:

• Android Java Programming
• Junit, Mockito, PowerMockito, Robolectric.
• Trustsonic TEE
• Certificate Pinning

Reference: Volkswagen Secure Sharing of Virtual Keys Case Study

My Lianyi

Match, meet, date & love. Seek fun at MyLianYi! MyLianYi is just that, an app dedicated to help singles find each other for friendship, dating and meaningful relationships. If you are single and finding it hard to meet new people, MyLianYi can help you as we will provide facilities for members to participate in networking/ dating activities. Join MyLianYi immediately, we will help to select and match the dating, and host an event to let the members know each other further. You can also send them self-introduction information to make it easier for more people to understand you.

Technical Stack:

• Android Kotlin Programming
• iOS Swift Programming
• FCM notification
• Basic Authentication
• Sprint Boot
• MySQL

iOS Screenshots 

Android Screenshots

Remote Medical Monitor

Designed a solution for remote medical monitor, including an IoT device, AWS IoT broker and server and an iOS mobile App. The solution got best commercial solution award in Renesas GR Peach Design Contest in 2017.

Technical Stack:

• iOS Objective-C Programming
• AWS IoT, DynamoDB, Lambda Micro Service
• Secure Communication
• SMS and notification

Presentation:
https://drive.google.com/file/d/1hZm-E19pKQWo79rpMJPWkq-B6AZyRC8x/view?usp=sharing


Video Clips:

Software TEE - Virtual Car Key

This is an App for our IoT solution to serve our valuable customers (Valeo). You can upload your TA (a file with some configurations) to our backend server, After then they can download the TA and run it.

You can use this app to lock and unlock the car, door with our smart lock, you can even start and stop the car engine, depending on the TA you uploaded to our backend server.

To be able to operate it with our smart lock, you need to “Install TA” first, then you can “Run TA”, if you have our smart lock, you should be enabled to do the operation as you configured in the TA on our server.

Technical Stack:

• Android Java Programming
• iOS Objective-C Programming
• Native C programming
• WhiteBox Crypto with Key Rotation for every 3 months
• Secure Channel Protocol
• App Protection: Anti-tampering, Anti-debug, Anti-hooking, Root/Jailbreak detection, Android App re-signing detection.

Experience:

• Built CI/CD pipelines with Jenkins, up to 10 customized deliverables for different customers. 
• Created a Python script to generate certificate public key hash for certificate pinning. 
• Implemented the mechanism to renew the White-Box keys for every 2-3 months. 
• Worked with server team to improve the network performance by reducing the commands from the server. 
• Worked with external labs (UL and APPLUS) and internal lab to do pen-testing for the application. 
• Fixed memory leakage issues and crash issue caused by CPU cache. 

Reference Link: https://mymotorwheels.wordpress.com/2016/09/21/valeo-partnered-with-gemalto-to-secure-its-virtual-car-key-valeo-inblue/