Service processing method and apparatus

A service processing apparatus, applied to a key management function entity, the apparatus comprising:

• one or more processors;
• a memory storing instructions, which, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
• receiving trigger information sent by an intermediary device, wherein the trigger information is obtained after user equipment (UE) starts a procedure of setting up a first encrypted connection to a network server;
• and
• assisting, based on the trigger information received by the transceiver, the intermediary device in negotiating with the UE and the network server, to enable the intermediary device to obtain a first key from the key management function entity through a second encrypted connection,
• wherein the key management function entity obtains the first key from the UE through a third encrypted connection after a negotiation with the network server based on the trigger information succeeds, or obtains the first key from the network server through a fourth encrypted connection after a negotiation with the UE based on the trigger information succeeds, and sends the first key to the intermediary device, or
• wherein the key management function entity triggers the intermediary device to obtain the first key from the network server after the negotiation with the UE based on the trigger information succeeds, or
• wherein the key management function entity obtains the first key from the network server based on the trigger information when an encrypted connection is set up between the key management function entity and the network server, and sends the first key to the intermediary device,
• wherein the key management function entity obtains the first key from the UE through a third encrypted connection or from the network server through a fourth encrypted connection, wherein the first key is used by the intermediary device to decrypt ciphertexts sent by the UE and the network server, the ciphertext is obtained after the UE or the network server encrypts service information by using a second key, and the first key is corresponding to the second key.

A service processing apparatus, applied to user equipment (UE), comprising:

• one or more processors;
• a memory storing instructions, which, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
• assisting, with an by a key management function entity and a network server, an intermediary device in obtaining a first key from the key management function entity through a first encrypted connection,
• wherein the key management function entity obtains the first key from the UE through a second encrypted connection after a negotiation with the network server based on the trigger information succeeds, or obtains the first key from the network server through a third encrypted connection after a negotiation with the UE based on the trigger information succeeds, and sends the first key to the intermediary device, or
• wherein the key management function entity triggers the intermediary device to obtain the first key from the network server after the negotiation with the UE based on the trigger information succeeds, or
• wherein the key management function entity obtains the first key from the network server based on the trigger information when an encrypted connection is set up between the key management function entity and the network server, and sends the first key to the intermediary device;
• encrypting service information using a second key, to obtain ciphertext;
• and
• sending the ciphertext to the network server by using the intermediary device;
• or receiving ciphertext forwarded by the intermediary device, wherein the ciphertext is obtained after the network server encrypts service information by using a second key and is sent by the network server to the intermediary device;
• wherein the first key is used by the intermediary device to decrypt the ciphertext, and the first key corresponds to the second key.