A key management method for an electronic apparatus, a network system comprising the electronic apparatus, a major management apparatus, and an authorized management apparatus, and the electronic apparatus storing a first application key, the key management method comprising the steps of:
- (a) receiving a device key from the major management apparatus;
- (b) receiving a delegation deployment message from the major management apparatus;
- (c) decrypting the delegation deployment message into an original delegation deployment message by the device key so that a right of managing the first application key is delegated from the major management apparatus to the authorized management apparatus;
- (d) receiving a first key management message from the authorized management apparatus;
- (e) decrypting the first key management message into a first original key management message by an authorization key comprised in the original delegation deployment message, wherein the first original key management message comprises a first operation code and a key identity;
- (f) selecting the first application key according to the key identity;
- and
- (g) applying a first operation corresponding to the first operation code to the first application key.