Device authorization method, electronic device, and system

A device authorization method, comprising:

• binding an accessory device and a controlling device to negotiate a first credential and a second credential, wherein the first credential is non-distributable and is used to authenticate the controlling device, and the second credential is distributable and is used to authenticate an authorized device;
• receiving, by the accessory device, a first authentication request from the authorized device, wherein the first authentication request comprises first information and verification information, and the verification information is obtained by processing the first information based on the second credential stored in the controlling device;
• verifying, by the accessory device, the verification information based on a second credential stored in the accessory device;
• and
• if the verification succeeds, sending, by the accessory device to the authorized device, indication information indicating that an authentication associated with the first authentication request succeeds.

An electronic device, comprising:

• at least one processor;
• and
• at least one memory coupled to the at least one processor and storing programming instructions for execution by the at least one processor to perform operations comprising:
• binding a controlling device and an accessory device to negotiate a first credential and a second credential, wherein the first credential is non-distributable and is used to authenticate the controlling device, and the second credential is distributable and is used to authenticate an authorized device;
• and
• in response to receiving a sharing request for the second credential, sending, by the controlling device, the second credential to the authorized device when an attribute of the second credential is distributable.