Service processing method, device and system

A service processing method, comprising:

• receiving a service execution request from a terminal;
• transmitting a verification notification carrying signature information to the terminal according to the service execution request, to cause the terminal generating first to-be-verified signature information;
• responsive to determining that a verification request carrying the first to-be-verified signature information is received from the terminal, performing a verification processing on the first to-be-verified signature information based on a pre-stored service public key and the signature information;
• and
• responsive to determining that the verification processing on the first to-be-verified signature information is successful, performing a service processing corresponding to the service execution request;
• wherein the method further comprises:
• receiving a storing request carrying a device ID, an application public key and second to-be-verified signature information from the terminal, wherein the terminal generates a pair of a device private key and a device public key through a Trusted Execution Environment (TEE) system, stores the device private key into the TEE system, transmits the device public key and the device ID of the terminal to a device-public-key management server, such that the device-public-key management server stores the device ID corresponding to the device public key;
• and, the terminal generates a pair of an application private key and the application public key through the TEE system, stores the application private key into the TEE system, performs a signature processing on the application public key, by using the device private key, and obtains the second to-be-verified signature information.

A terminal, comprising a processor and a memory, wherein the memory stores instructions that, when being executed by the processor, cause the processor to:

• transmit a service execution request to a service server;
• receive a verification notification carrying signature information from the service server in correspondence with the service execution request;
• verify currently inputted biometric feature information through a Trusted Execution Environment (TEE) system, responsive to determining that the currently inputted biometric feature information is consistent with pre-stored reference biometric feature information, perform a signature processing on the signature information by using a pre-stored service private key, and obtain first to-be-verified signature information;
• and,
• transmit a verification request carrying the first to-be-verified signature information to the service server;
• wherein the instructions further cause the processor to:
• generate a pair of a device private key and a device public key through the TEE system, store the device private key into the TEE system, transmit the device public key and a device ID of the terminal to a device-public-key management server, such that the device-public-key management server stores the device ID corresponding to the device public key;
• generate a pair of an application private key and an application public key through the TEE system, store the application private key into the TEE system, perform a signature processing on the application public key, by using the device private key, and obtain second to-be-verified signature information;
• and
• transmit a storing request to the service server, wherein the storing request carries the device ID, the application public key and the second to-be-verified signature information.