Abstract: Example methods, apparatuses, and computer-readable media for offline transaction processing are disclosed.

Abstract: Embodiments of this application provide methods and apparatuses for offline payment authorization. In an implementation, a method comprising: obtaining wallet account information, a current account balance, and current credit information of a target electronic wallet account in response to determining that a current state of the target electronic wallet account satisfies a predetermined certificate delivery condition, determining an offline payment limit based on the current account balance and the current credit information, signing summary information by using a private key of a server to obtain an electronic wallet signature, generating a user certificate based on the summary information and the electronic wallet signature, and sending the user certificate to a terminal device associated with the target electronic wallet account for an offline account corresponding to the target electronic wallet account to make offline payment within the offline payment limit based on the user certificate.

Abstract: Embodiments of this specification provide account opening methods, systems, and apparatuses. An example method is performed by a terminal device that includes a trusted execution environment (TEE) and an encryption hardware-based secure element. When it is detected that a current user initiates an account opening request, the terminal device obtains a user public key of the current user in the TEE, and signs a user public key by using a predetermined manufacturer private key, to obtain a user certificate; signs, in the secure element by using a user private key corresponding to the user public key, opening information; generates an opening request in the TEE based on at least the user certificate and signed opening information; and, in the TEE, generates an opening request packet based on the opening request, and sends the opening request packet to a server that opens an account based on the opening request packet.

Abstract: Data processing includes acquiring service data of a target service by using a trusted application in a trusted execution environment (TEE), generating a service session key corresponding to the target service, and transferring the service data and the service session key to a secure element and encrypted based on the service session key to obtain service ciphertext information, and encrypting the service session key based on a target service key to obtain a service session key ciphertext. A key identifier of the target service key, the service ciphertext information, and the service session key ciphertext are sent to a server device to determine the target service key, which is used to decrypt the service session key ciphertext to obtain the service session key, which is used to decrypt the service ciphertext information to obtain the service data of the target service to perform target service processing.