Abstract: This specification discloses methods, apparatuses, and storage media for an offline identity verification. In an example, identity information to be verified of a user that is collected by a terminal device in an offline state is obtained. The identity information to be verified is signed to obtain signed identity information to be verified. The signed identity information to be verified is sent to a secure environment. Signature verification is performed on the signed identity information to be verified in the secure environment. The identity information to be verified is compared with standard identity information stored in the secure environment after signature verification on the signed identity information to be verified is passed, to obtain a first comparison result. Offline identity verification is performed on the user according to the first comparison result.

Abstract: Embodiments of this specification provide account opening methods, systems, and apparatuses. An example method is performed by a terminal device that includes a trusted execution environment (TEE) and an encryption hardware-based secure element. When it is detected that a current user initiates an account opening request, the terminal device obtains a user public key of the current user in the TEE, and signs a user public key by using a predetermined manufacturer private key, to obtain a user certificate; signs, in the secure element by using a user private key corresponding to the user public key, opening information; generates an opening request in the TEE based on at least the user certificate and signed opening information; and, in the TEE, generates an opening request packet based on the opening request, and sends the opening request packet to a server that opens an account based on the opening request packet.