Security verification method and apparatus

A method, wherein the method comprises:

• receiving a first request, wherein the first request comprises a first response value and a second value, the first response value is determined based on a security key and a first value comprised in a first command of a network device, and the first command is a select command, a query command, a query repeat command, a query adjust command, or an acknowledgment command;
• verifying a terminal device based on the first response value;
• determining a second response value based on the second value and the security key;
• sending a first response message, wherein the first response message comprises the second response value, and the second response value is used by the terminal device to verify the network device;
• and
• sending a second response message to an access and mobility management function or a tag management function, wherein the second response message comprises a derived key, the derived key is generated based on the security key, an electronic product code, and at least one of the first value or the second value, and the electronic product code is used to identify the terminal device.

An apparatus, comprising at least one processor and at least one memory, wherein the at least one processor is coupled to the at least one memory, the at least one memory stores instructions which, when executed by the at least one processor, cause the apparatus to:

• receive a first command from a network device, wherein the first command comprises a first value, and the first command is a select command, a query command, a query repeat command, a query adjust command, or an acknowledgment command;
• determine a first response value based on the first value and a security key;
• send a first request, wherein the first request comprises the first response value and a second value, and the first response value is used by a verification function to verify the apparatus;
• receive a first response message, wherein the first response message comprises a second response value that is determined based on the second value and the security key;
• and
• verify the network device based on the second response value, wherein a second response message is sent to an access and mobility management function or a tag management function, the second response message comprises a derived key, the derived key is generated based on the security key, an electronic product code, and at least one of the first value or the second value, and the electronic product code is used to identify the apparatus.

An apparatus, comprising at least one processor and at least one memory, wherein the at least one processor is coupled to the at least one memory, the at least one memory stores instructions which, when executed by the at least one processor, cause the apparatus to:

• receive a first request, wherein the first request comprises a first response value and a second value, the first response value is determined based on a security key and a first value comprised in a first command of a network device, and the first command is a select command, a query command, a query repeat command, a query adjust command, or an acknowledgment command;
• verify a terminal device based on the first response value;
• determine a second response value based on the second value and the security key;
• send a first response message, wherein the first response message comprises the second response value, and the second response value is used by the terminal device to verify the network device;
• and
• send a second response message to an access and mobility management function or a tag management function, wherein the second response message comprises a derived key, the derived key is generated based on the security key, an electronic product code, and at least one of the first value or the second value, and the electronic product code is used to identify the terminal device.