Communication method and apparatus

Abstract

Provided in the present application are a communication method and apparatus, which are used for preventing a key of a terminal from being stolen by an attacker, thereby ensuring the communication security of the terminal. The method comprises: a network function production entity serving a terminal sending a first message to a first security function entity, receiving a second message from the first security function entity, and sending ciphertext information to a network function consumption entity, wherein the network function production entity and the first security function entity are deployed in the same hardware environment, the network function production entity operates in a first operating environment, the first security function entity operates in a second operating environment, and the security level of the second operating environment is higher than the security level of the first operating environment; the first message is used for requesting the generation, for the network function consumption entity serving the terminal, of a key shared by the network function consumption entity and the terminal; and the second message comprises the ciphertext information, and the ciphertext information is ciphertext obtained by means of the first security function entity encrypting the key shared by the network function consumption entity and the terminal.

Images