Payment method of hardware wallet, hardware wallet and computer readable storage medium

Abstract

The application provides a payment method of a hard wallet, the hard wallet and a computer readable storage medium, and relates to the technical field of payment transactions. The payment method comprises the following steps: a hard wallet opening step; based on a hard wallet opening request, a hard wallet is bound with an account wallet, a public key / private key pair of the hard wallet is generated and stored, and a security management parameter is issued to the hard wallet, the public key is an owner identifier in a coin string information, the private key is a payment signature key of the hard wallet, and the security management parameter is used to limit the number of offline transactions and the amount; an offline payment step of the hard wallet; based on an offline payment initialization command initiated by a payee, when it is judged that the hard wallet meets the security management parameter, the payer generates a payment voucher in response to the offline payment initialization command, and simultaneously updates the number of offline transactions and the cumulative offline transaction amount of the hard wallet, the payment voucher comprises a transaction amount, a transaction index, a payee public key and a payer signature.

Description

Technical Field

[0001] This invention relates to the field of payment transaction technology, and more specifically, to a payment method using a hard wallet, a hard wallet, and a computer-readable storage medium. Background Technology

[0002] Currently, the digital yuan is a digital form of legal tender issued by the People's Bank of China. It is operated by designated institutions and exchanged with the public. Based on a broad account system, it supports loosely coupled bank account functions, is equivalent to paper money and coins, possesses value characteristics and legal tender status, and supports controlled anonymity. The value characteristics of the digital yuan are embodied in the form of a coin string. The digital yuan is produced by an encryption front-end system, and the encryption front-end machines distributed in the operating institutions add the user's owner identifier and related fields to the core domain of the digital yuan, forming a coin string, which is then sent to the user's digital yuan wallet. The digital yuan is compatible with both account and value characteristics, and can be based on three methods: account, quasi-account, and value. Digital yuan wallets are divided into software wallets and hardware wallets according to their carriers. Software wallets provide services to users based on mobile payment apps, software development kits (SDKs), and application programming interfaces (APIs). Hardware wallets implement digital yuan-related functions based on technologies such as security chips, and provide services to users through IC cards, mobile terminals, wearable devices, and IoT devices. The combination of software and hardware wallets can enrich the wallet ecosystem and meet the needs of different groups. Currently, value-based digital yuan hard wallets support dual offline applications, meaning that payment transactions can be completed even when both the payer and payee are offline.

[0003] At this point, the payer and payee communicate via NFC, conforming to the ISO / IEC 14443 protocol. The payer issues a payment voucher, which includes coin string information and current transaction information. The current transaction information is added after the coin string information in the form of a transaction chain. The coin string information data can range from 300 to 600 bytes, and the transaction chain information is about 161 bytes, meaning the payment voucher data can reach more than 700 bytes. The entire transaction process also requires identity authentication, key negotiation, and encryption / decryption of communication data, resulting in a communication data volume far exceeding that of conventional NFC-based transactions. This slows down offline application transactions. Furthermore, the payee stores the payment voucher after receiving it, and can later synchronize and withdraw it to their account. In application scenarios with high transaction volumes (such as rail transit), storage, synchronization, and withdrawal will face the challenge of storing and uploading large amounts of data. These transaction speed and data volume issues limit the application scenarios of value-based hardware wallets. While quasi-account-based hardware wallets using NFC communication reduce transaction data volume, they also reduce algorithm strength, allowing for faster payment completion. However, they require a single connection and cannot be completed when both parties are offline. Summary of the Invention

[0004] The purpose of this invention is to provide a payment method for a hard wallet, a hard wallet, and a computer-readable storage medium, which can improve transaction speed in scenarios where hard wallet payments are made offline, especially for scenarios with frequent transactions such as rail transit.

[0005] In a first aspect, embodiments of the present invention provide a payment method for a hard wallet, applied to a digital RMB hard wallet, comprising:

[0006] Steps for opening a digital yuan hard wallet;

[0007] Based on the request to open a digital RMB hard wallet, the digital RMB hard wallet is bound to the account wallet, a public key / private key pair of the digital RMB hard wallet is generated and stored, and security management parameters are sent to the digital RMB hard wallet. The public key is the owner identifier in the coin string information, the private key is the payment signature key of the digital RMB hard wallet, and the security management parameters are used to limit the number and amount of offline transactions.

[0008] Offline payment steps using a digital yuan hard wallet;

[0009] The payer holding the digital RMB hard wallet determines whether the digital RMB hard wallet meets the security management parameters based on the offline payment initialization command initiated by the payee holding the POS machine. If the security management parameters are met, the payer generates a payment certificate in response to the offline payment initialization command and updates the number of offline transactions and the cumulative offline transaction amount of the digital RMB hard wallet. The payment certificate includes the transaction amount, transaction index, payee's public key, and payer's signature.

[0010] In some embodiments, the digital RMB hard wallet is also connected to the operator's backend. Based on the connection command issued by the operator's backend, the digital RMB hard wallet connects to the operator's backend. The operator's backend verifies the payment voucher and transfers the digital RMB amount in the account wallet associated with the digital RMB hard wallet to the payer's account. The operator's backend issues a connection operation completion confirmation command and sends new security management parameters to the digital RMB hard wallet.

[0011] In some embodiments, the online connection step of the digital RMB hard wallet further includes: the digital RMB hard wallet receiving an online initialization command, sending the hard wallet ID, hard wallet association code, transaction index, and MAC verification code of the digital RMB hard wallet to the backend of the operating institution, the backend of the operating institution verifying the MAC of the digital RMB hard wallet, associating the corresponding account wallet based on the hard wallet association code of the digital RMB hard wallet, and issuing the online command.

[0012] In some embodiments, the offline payment step further includes: the payer generating a payment credential in response to the offline payment request, and simultaneously generating and storing the transaction flow of the current offline transaction, the transaction flow including the transaction status of the current offline transaction, the payer's hard wallet ID, the payee's hard wallet ID, and the hard wallet association code.

[0013] In some embodiments, the digital RMB hard wallet uploads the stored payment vouchers and transaction records to the backend of the operating institution based on the received online command. The backend of the operating institution associates the account wallet of the digital RMB hard wallet with the transaction records and verifies the payment vouchers using the public key of the digital RMB hard wallet. When the transaction status in the transaction records of the payee is completed, the digital RMB in the account wallet associated with the digital RMB hard wallet is transferred to the payee's account wallet.

[0014] In some embodiments, during the opening step, the security management parameters issued by the operating institution's backend to the digital RMB hard wallet do not include coin string management information. The security management parameters include offline data accumulation limit, single offline amount limit, and consecutive offline transaction limit. During the opening step, the private key is privately stored in the digital RMB hard wallet, and the public key is returned to the operating institution's backend in P10 certificate format.

[0015] In some embodiments, the payment steps of the digital RMB hard wallet further include the payer, holding the digital RMB hard wallet, sending the wallet public key certificate, the payer's hard wallet ID, the payer's hard wallet association code, and a random number to the payee holding the POS machine, based on the determination that the number of offline transactions and the cumulative offline transaction amount meet the requirements of security management parameters.

[0016] In some embodiments, the payment steps of the digital RMB hard wallet further include the payer holding the digital RMB hard wallet verifying the payee's signature, generating a session key, and generating a payment voucher based on the payee's public key certificate sent by the payee holding the POS machine.

[0017] In a second aspect, embodiments of the present invention provide a digital yuan hard wallet, comprising:

[0018] processor;

[0019] Memory used to store the processor's executable instructions;

[0020] The processor is configured to execute the instructions to implement the payment method as described in the first aspect.

[0021] In a third aspect, embodiments of the present invention provide a computer-readable storage medium in some embodiments, wherein when computer execution instructions stored in the computer-readable storage medium are executed by a processor of an electronic device, the electronic device is capable of performing the payment method as described in the first aspect.

[0022] As described above, in the hardware wallet payment method provided in this embodiment, the hardware wallet can communicate via NFC, conforms to the ISO / IEC 14443 protocol, and is compatible with existing POS terminals. Its functions are implemented through APDU commands. Compared to the dual offline payment method of a value wallet, this offline payment method reduces the amount of coin string expressions in payment credentials, reduces coin string-related information in management data, and reduces balance credentials in stored data. The amount of communication and storage data is reduced by at least two-thirds, while maintaining security strength comparable to a value wallet.

[0023] The hardware wallets that execute the above payment methods do not store coin strings. Instead, they manage risks through offline transaction limits issued by banks and generate payment vouchers. Digital RMB transaction data does not contain coin string information, but only owner identifiers (public keys) and transaction chain data. This greatly reduces communication and storage data, approaching the communication data volume of financial IC cards, which can play an advantage in financial payment scenarios.

[0024] Furthermore, operators can set offline spending limits and consecutive offline limits for wallets. The secure chip's operating system enforces transaction risk control, achieving security levels comparable to debit / credit financial IC cards. Hardware wallet offline payment scenarios significantly reduce communication and data storage. Transaction speeds are also increased, meeting the needs of high-volume scenarios such as rail transit. Hardware wallet offline payment scenarios offer robust security features including identity authentication, card verification, and non-repudiation, meeting the security requirements of offline payments. Attached Figure Description

[0025] To more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings used in the embodiments will be briefly introduced below. It should be understood that the following drawings only show some embodiments of the present invention and should not be regarded as a limitation on the scope. For those skilled in the art, other related drawings can be obtained based on these drawings without creative effort.

[0026] Figure 1 This is a transaction flowchart of a payment method using a hard wallet according to an embodiment of the present invention.

[0027] Figure 2 This is a schematic diagram of the wallet opening step in a payment method using a hard wallet according to an embodiment of the present invention;

[0028] Figure 3This is a schematic diagram of the wallet payment steps in a hardware wallet payment method provided in an embodiment of the present invention;

[0029] Figure 4 This is a schematic diagram of the wallet connection steps in a payment method using a hard wallet according to an embodiment of the present invention. Detailed Implementation

[0030] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. The components of the embodiments of the present invention described and shown in the accompanying drawings can generally be arranged and designed in various different configurations.

[0031] Therefore, the following detailed description of the embodiments of the invention provided in the accompanying drawings is not intended to limit the scope of the claimed invention, but merely to illustrate selected embodiments of the invention. All other embodiments obtained by those skilled in the art based on the embodiments of the invention without inventive effort are within the scope of protection of the invention.

[0032] In the payment method using a hard wallet provided in this embodiment, a digital RMB hard wallet application is designed. The hard wallet is bound to an account upon opening, generating and storing a public-private key pair. The public key is the owner identifier in the coin string information, and the private key is the payment signature key for the hard wallet. Because the algorithm technology of private key signing makes transaction information tamper-proof and non-repudiable, the payee can verify the transaction signature data offline. This hard wallet does not store coin string information; instead, it uses the offline transaction limit issued by the bank's backend for risk management and to generate payment vouchers to complete offline transactions. The payment voucher is the signature of the current transaction. The payee can verify the authenticity of the payment voucher offline and upload it when online. The payment voucher is compatible with transaction subchain data from dual offline transactions. The operating institution's backend can verify the hard wallet payment voucher, and after successful verification, it calls the account wallet to complete the payment.

[0033] Please refer to the reference. Figures 1 to 4 The following detailed description, in conjunction with the accompanying drawings, indicates that the digital RMB hard wallet will be referred to as a "hard wallet" in this embodiment. The payment method of the hard wallet provided in this embodiment includes:

[0034] (I) Steps for opening a hard wallet, please refer to the following for details. Figure 2 .

[0035] Based on the hard wallet opening request, the hard wallet is bound to the account wallet, a public / private key pair of the digital RMB hard wallet is generated and stored, and security management parameters are sent to the hard wallet. The public key is the owner identifier in the coin string information, the private key is the payment signature key of the hard wallet, and the security management parameters are used to limit the offline transaction limit, such as limiting the number of offline transactions and the offline transaction amount.

[0036] The institutional counter mentioned in this application embodiment can be understood as a bank counter, and the institutional back-end can also be called the operating institution back-end or bank back-end.

[0037] The hardware wallet opening process is compatible with existing hardware wallet opening processes. The difference is that the security management parameters in this embodiment no longer include coin string management information (number of transfers, offline transaction time limit for a single coin string). These security management parameters include: offline data accumulation limit, single offline transaction limit, and consecutive offline transaction limit. It should also be clarified again that the hardware wallet in this embodiment does not store coin strings; instead, it uses the offline transaction limit issued by the bank for risk management and generates payment vouchers.

[0038] The detailed steps for opening a hard wallet are as follows:

[0039] Step 1. The institution's counter sends a hard wallet opening and initialization command to the digital RMB hard wallet. The hard wallet generates a public and private key pair. The private key is stored privately in the wallet, and the public key is returned in P10 certificate format.

[0040] Step 2. The hardware wallet returns its own hardware wallet ID, public key (P10 certificate), and other data, which is then submitted to the operating institution's backend by the institution's counter.

[0041] Step 3. The operating institution's backend issues an opening command, which sends the generated hardware wallet public key certificate, hardware wallet security management parameters, and other data to the institution's counter. The institution's counter then transmits the hardware wallet public key certificate, hardware wallet security management parameters, and other data to the hardware wallet.

[0042] Step 4. After storing the public key certificate and security management parameters in the hardware wallet, it returns the hardware wallet association code, MAC, etc. The hardware wallet association code is used to associate with the account wallet, and the MAC verifies the integrity of the received data.

[0043] Step 5. After the operating institution verifies the MAC address and binds the wallet account ID and hardware wallet ID, it returns the transaction index and MAC address.

[0044] Step 6. After the hardware wallet verifies the MAC address, a success response code is returned, and the hardware wallet is bound to the account wallet.

[0045] In the above process, the hardware wallet and the operating institution's backend use encrypted data and MAC addresses to protect data and verify identity.

[0046] (II) Hard wallet payment steps, please refer to the following for details. Figure 3 .

[0047] The offline payment steps of a digital RMB hard wallet are as follows: The payer holding the hard wallet determines whether the hard wallet meets the security management parameters based on the offline payment initialization command initiated by the payee holding the POS machine. If the security management parameters are met, the payer responds to the offline payment initialization command by generating a payment certificate and updating the number of offline transactions, the cumulative offline transaction amount, and generating and storing the transaction flow of the current offline transaction. The payment certificate includes the transaction amount, transaction index, payee's public key, and payer's signature. The transaction flow includes the transaction status of the current offline transaction, payer's hard wallet ID, payee's hard wallet ID, and hard wallet association code.

[0048] The detailed steps for offline payment are as follows:

[0049] Step 1. The payee (the POS merchant) sends an offline payment initialization command to the payer (who holds a digital RMB hard wallet).

[0050] Step 2. The payer determines whether the number of offline transactions and the cumulative amount of offline transactions in the hardware wallet meet the offline transaction limits based on the wallet management parameters.

[0051] If the payer meets the transaction conditions, the system will return the payer's hardware wallet public key certificate, payer's hardware wallet ID, payer's hardware wallet association code, and a random number.

[0052] Step 3. The payee verifies the payer's public key certificate. After successful verification, the payer saves the payer's hard wallet ID, hard wallet association code, generated random number, session key factor, and data signature. The payee (merchant) sends a payment command containing the random number, session key factor, payee's public key certificate, payee's signature, payee's hard wallet ID, and hard wallet association code.

[0053] Step 4. The payer verifies the payee's public key certificate, verifies the payee's signature, generates a session key, and generates a payment credential.

[0054] The payer updates the cumulative offline transaction amount, the number of offline transactions, and stores the transaction log (where the transaction status is in progress).

[0055] The payer returns the session key factor, payment voucher, and MAC.

[0056] The payment voucher format is shown in the table below:

[0057] Transaction Amount Transaction Index Recipient Public Key Payer Signature

[0058] Transaction details include: transaction type, transaction amount, transaction time, transaction index, payer wallet ID, payer wallet name, payer wallet association code, payee wallet ID, payee wallet name, payee wallet association code, transaction status, and remarks.

[0059] Step 5. The payee (merchant) generates a session key, verifies the MAC address, and verifies the payment credential (the payer's public key verifies the payer's signature).

[0060] The payee stores payment vouchers and transaction records (where the transaction status is "in progress").

[0061] The payee sends a payment confirmation command, which includes the payment status and transaction MAC.

[0062] Step 6. The payer verifies the payee's transaction MAC address and updates the transaction status in the transaction log to "completed".

[0063] The payer returns the transaction status and MAC address.

[0064] Step 7. The recipient verifies the MAC address and updates the transaction status in the transaction log to "completed".

[0065] (III) Steps for connecting a hard wallet (see below) Figure 4 .

[0066] The process of connecting a digital RMB hard wallet involves the following steps: Based on the connection command issued by the operator's backend, the digital RMB hard wallet connects to the operator's backend. The operator's backend verifies the payment credential and transfers the digital RMB amount from the account wallet associated with the hard wallet to the payee's account. The operator's backend then issues a confirmation command to confirm the completion of the connection operation and sends new security management parameters to the hard wallet.

[0067] The hardware wallet receives the online initialization command and sends its hardware wallet ID, hardware wallet association code, transaction index, and MAC verification code to the operator's backend. The operator's backend verifies the hardware wallet's MAC address, associates it with the corresponding account wallet based on the hardware wallet association code, and issues the online command.

[0068] Based on the received online command, the hardware wallet uploads the stored payment vouchers and transaction records to the operator's backend. The operator's backend associates the hardware wallet with the account wallet based on the transaction records and verifies the payment voucher using the hardware wallet's public key. When the transaction status in the recipient's transaction records is completed, the digital RMB in the account wallet associated with the hardware wallet is transferred to the recipient's account wallet.

[0069] The specific steps for connecting a hard wallet are as follows:

[0070] 1. The POS (payee) sends an online initialization command to the digital RMB hard wallet (payer).

[0071] 2. The hardware wallet returns data such as the hardware wallet association code, hardware wallet ID, and transaction index, which are then uploaded to the operator's backend by the POS terminal.

[0072] 3. The operating organization verifies the MAC address and the associated hardware wallet in the backend, and then issues an online command.

[0073] 4. The hardware wallet verifies and issues a MAC address, returning the stored payment voucher and transaction history data to the operating institution's backend.

[0074] 5. The operating institution's backend associates the payer's account wallet with the transaction flow, verifies the payer's payment voucher using the payer's hardware wallet public key, and transfers the digital RMB to the payee's account when the transaction status in the payee's transaction flow is completed.

[0075] The operating organization's backend can issue a confirmation command for the completion of online operations and then issue new security management data.

[0076] 6. After the hardware wallet verifies the MAC address, the offline transaction cumulative amount, offline transaction count, transaction history, and other data will be cleared. If new security management data is issued, the security management data can be updated at the same time.

[0077] The hardware wallet returned a success response code.

[0078] Security management parameters include offline data accumulation limits, single offline transaction limits, and the number of consecutive offline transactions.

[0079] In the payment method of the hard wallet provided in this embodiment, the hard wallet uses NFC communication (NFC stands for Near Field Communication. NFC is developed based on contactless radio frequency identification (RFID) technology combined with wireless interconnection technology. It provides a very secure and fast communication method for various electronic products that are becoming increasingly popular in our daily lives. The "near field" in the Chinese name NFC refers to radio waves near electromagnetic fields. Because radio waves are actually electromagnetic waves, they follow Maxwell's equations. The electric field and magnetic field will alternately convert energy during the process of propagating from the transmitting antenna to the receiving antenna, and they will reinforce each other during the conversion. For example, the radio signals used by our mobile phones are propagated using this principle. This method is called far-field communication. Within 10 wavelengths of electromagnetic waves, the electric field and magnetic field are independent of each other. At this time, the electric field has little meaning, but the magnetic field can be used for short-range communication, which we call near-field communication). It conforms to the ISO / IEC 14443 protocol, is compatible with existing POS and terminals, and its functions are implemented through APDU commands. This offline payment method, compared to the dual offline payment of a value wallet, reduces the amount of coin string expressions in payment credentials, reduces coin string-related information in management data, and reduces balance credentials in storage data. The amount of communication and storage data is reduced by at least two-thirds, while maintaining security strength comparable to a value wallet.

[0080] According to the embodiments of the present invention, the digital RMB transaction data does not contain coin string information, but only the owner identifier (public key) and transaction chain data, which greatly reduces the amount of communication and storage data, approaching the communication data volume of a financial IC card, and can play an advantage in financial payment scenarios.

[0081] Furthermore, operators can set offline spending limits and consecutive offline limits for wallets. The secure chip's operating system enforces transaction risk control, achieving security levels comparable to debit / credit financial IC cards. Hardware wallet offline payment scenarios significantly reduce communication and data storage. Transaction speeds are also increased, meeting the needs of high-volume scenarios such as rail transit. Hardware wallet offline payment scenarios offer robust security features including identity authentication, card verification, and non-repudiation, meeting the security requirements of offline payments.

[0082] This invention also provides a digital RMB hard wallet (not shown), comprising: a processor; and a memory for storing processor-executable instructions; wherein the processor is configured to execute the instructions to implement the above-described payment method.

[0083] The processor is the control center of an electronic device. It connects various parts of the device via interfaces and lines, and performs various functions and processes data by running or executing software programs and / or modules stored in memory, and by calling data stored in memory, thereby providing overall monitoring of the electronic device. A processor may include one or more processing units; optionally, it may integrate an application processor and a modem processor. The application processor primarily handles the operating system, user interface, and applications, while the modem processor primarily handles wireless communication. It is understood that the modem processor can also be integrated into the processor.

[0084] The digital yuan hard wallet may also include a storage device for storing software programs and various data. The storage device may primarily consist of a program storage area and a data storage area. The program storage area may store the operating system, applications required by at least one functional module, etc. Furthermore, the storage device may include high-speed random access memory and non-volatile memory, such as at least one disk storage device, flash memory device, or other volatile solid-state storage device.

[0085] In an exemplary embodiment, this embodiment also provides a computer-readable storage medium including instructions, such as a memory including instructions, which can be executed by the processor of a digital RMB hard wallet to implement the payment method in the above embodiment. Optionally, the computer-readable storage medium can be a non-transitory computer-readable storage medium, such as a read-only memory (ROM), random access memory (RAM), CD-ROM, magnetic tape, floppy disk, and optical data storage device.

[0086] It should be noted that when one or more instructions in the computer-readable storage medium or computer program product are executed by the processor of the digital RMB hard wallet, they implement the various processes of the above payment method embodiments and achieve the same technical effect as the above payment method. To avoid repetition, they will not be described again here.

[0087] The above description is merely a preferred embodiment of the present invention and is not intended to limit the invention. Various modifications and variations can be made to the present invention by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.

Claims

1. A payment method using a hard wallet, characterized in that, Applied to digital yuan hardware wallets, which do not store coin strings, including: Steps for opening a digital yuan hard wallet; Based on the request to open a digital RMB hard wallet, the digital RMB hard wallet is bound to the account wallet, a public key / private key pair of the digital RMB hard wallet is generated and stored, and security management parameters are sent to the digital RMB hard wallet. The public key is the owner identifier in the coin string information, the private key is the payment signature key of the digital RMB hard wallet, and the security management parameters are used to limit the number and amount of offline transactions. Offline payment steps using a digital yuan hard wallet; The payer holding the digital RMB hard wallet determines whether the digital RMB hard wallet meets the security management parameters based on the offline payment initialization command initiated by the payee holding the POS machine. If the security management parameters are met, the payer generates a payment certificate in response to the offline payment initialization command and updates the number of offline transactions and the cumulative offline transaction amount of the digital RMB hard wallet. The payment certificate includes the transaction amount, transaction index, payee's public key, and payer's signature. In the opening step, the security management parameters issued by the operating institution's backend to the digital RMB hard wallet do not include coin string management information. The security management parameters include offline data accumulation amount limit, single offline amount limit, and consecutive offline transaction limit. In the opening step, the private key is privately stored in the digital RMB hard wallet, and the public key is returned to the operating institution's backend in P10 certificate format. It also includes a digital RMB hard wallet connection step. Based on the connection command issued by the operating institution's backend, the digital RMB hard wallet connects to the operating institution's backend. The operating institution's backend verifies the payment voucher, transfers the digital RMB amount of the account wallet associated with the digital RMB hard wallet to the payee's account, and the operating institution's backend issues a connection operation completion confirmation command and issues new security management parameters to the digital RMB hard wallet.

2. The payment method according to claim 1, characterized in that, The online connection steps of the digital RMB hard wallet further include: the digital RMB hard wallet receiving an online initialization command, sending the hard wallet ID, hard wallet association code, transaction index, and MAC verification code of the digital RMB hard wallet to the backend of the operating institution, the backend of the operating institution verifying the MAC of the digital RMB hard wallet, associating the corresponding account wallet based on the hard wallet association code of the digital RMB hard wallet, and issuing the online command.

3. The payment method according to claim 1, characterized in that, The offline payment step further includes: the payer generating a payment certificate in response to the offline payment request, and simultaneously generating and storing the transaction flow of the current offline transaction, the transaction flow including the transaction status of the current offline transaction, the payer's hard wallet ID, the payee's hard wallet ID, and the hard wallet association code.

4. The payment method according to claim 1, characterized in that, Based on the received online command, the digital RMB hard wallet uploads the stored payment vouchers and transaction records to the backend of the operating institution. The backend of the operating institution associates the account wallet of the digital RMB hard wallet with the transaction records and verifies the payment vouchers using the public key of the digital RMB hard wallet. When the transaction status in the transaction records of the payee is completed, the digital RMB in the account wallet associated with the digital RMB hard wallet is transferred to the payee's account wallet.

5. The payment method according to claim 1, characterized in that, The payment steps of the digital RMB hard wallet also include the payer, who holds the digital RMB hard wallet, sending the wallet public key certificate, the payer's hard wallet ID, the payer's hard wallet association code, and a random number to the payee holding the POS machine, based on the judgment that the number of offline transactions and the cumulative offline transaction amount meet the requirements of security management parameters.

6. The payment method according to claim 5, characterized in that, The payment steps of the digital RMB hard wallet also include the payer holding the digital RMB hard wallet verifying the payee's signature, generating a session key, and generating a payment voucher based on the payee's public key certificate sent by the payee holding the POS machine.

7. A hard wallet, characterized in that, include: processor; Memory used to store the processor's executable instructions; The processor is configured to execute the instructions to implement the payment method as described in any one of claims 1 to 6.

8. A computer-readable storage medium, characterized in that, When the computer-executable instructions stored in the computer-readable storage medium are executed by the processor of the electronic device, the electronic device is capable of performing the payment method as described in any one of claims 1 to 6.

Images