Qifei Li

Security Engineering · Privacy Computing

Heidelberg, Germany

rev. July 2026

Abstract. Ten years of security engineering across NEC Laboratories Europe, Alibaba, and NIO. I work on systems whose guarantees hold without trusting the operator — multi-party computation, homomorphic encryption, trusted execution, federated learning — and on the operational side of security at enterprise scale. Two IEEE publications. Currently building Mayfly, an EU AI Act compliance advisory that uses privacy-enhancing technologies as the bridge between Chinese AI companies and European regulation.

Premise. Trust is a property to be verified, not a feeling to be marketed. Accordingly this page is plain HTML — no scripts, no analytics, no cookies, no third-party requests — and each claim below links to something you can check.

1.Experience

YearsPositionOrganizationPlace
2026 —FounderMayflyHeidelberg
2024 – 26Lead Information Security EngineerNIO Inc.Munich
2022 – 24Research ScientistNEC Laboratories EuropeHeidelberg
2019 – 21Privacy Computing ResearcherAlibaba GroupHangzhou

NIO: led EMEA security operations; SIEM migration to Microsoft Sentinel — cost −60 %, mean time to respond −80 %. NEC: SGX-based secure AI inference; NFC passport reader with mutual authentication. Alibaba: HomoPAI, production privacy-preserving ML on homomorphic encryption [2].

2.Education

YearsDegreeInstitution
2018 – 20MSc, CybersecurityHarbin Institute of Technology 哈尔滨工业大学
2014 – 18BSc, Computer ScienceHarbin Institute of Technology 哈尔滨工业大学

National Cybersecurity Scholarship, 2019. CTF competitor, 2015 – 2019.

3.Publications

  1. Q. Li et al., “LISA: Lightweight Single-Server Secure Aggregation with Robustness,” in IEEE ICDCS, 2025.
  2. Q. Li et al., “HomoPAI: A Secure Collaborative Machine Learning Platform Based on Homomorphic Encryption,” in IEEE ICDE, 2020.

4.Software

ToolFunctionProperty
ai-act-risk EU AI Act risk-tier classifier with obligations & PET recommendation client-side only
hd-keygen BIP39 mnemonic → Bitcoin / Ethereum / Solana keys (noble cryptography, inlined) offline, no CDN

Both run entirely in the browser; no data leaves the device. Source in this site’s repository — audit before use.

5.Selected writing

Long-form wikis (Chinese), each an attempt to map a domain end to end. Open-source, illustrated, statically hosted. Full index with abstracts: writing.

TitleDomain
W1AI 工业大爆炸the AI industrial explosion — chips → power → jobsai · industry
W2资本有国界吗?global capital atlas — SWF, VC, family capital, cryptofinance
W3媒体权力图谱media ownership, bias ratings, AI-era propagandamedia
W4你没见过的东西business insights handbook, 29 chaptersbusiness
W5原罪与算法seven sins × algorithms; privacy self-defenseprivacy
W6世界民族与社会结构志peoples & social structures, 30 chapterssociety
W7与君王同游hardcore Europe travel, one monarch per citytravel · history
W8Physica 互动物理实验室70 lessons, 21 canvas simulationsphysics
W9Claude Code PlaybookAI-agent engineering: context, specs, orchestrationai · agents

6.Notes

DateNote
2026-06-04EU AI Act Article 10 — data-governance requirements for Chinese AI companies
2026-05-21HD wallets — how to generate and save crypto keys the right way