An application program integrity verification method, wherein the method executed by a network device, comprises: when obtaining a program package of an application program, storing a digital signature of the application program in the program package, wherein the program package includes the digital signature and data of the application program, wherein the digital signature is obtained, by a manufacturer, by signing a first digest of the application program using a private key of the manufacturer, wherein the first digest is obtained, by the manufacturer, by performing an eigenvalue calculation on the data of the application program; performing the eigenvalue calculation on the data of the application program when the application program starts, to obtain a second digest of the application program; decrypting the stored digital signature using a public key in an embedded key pair, to obtain the first digest of the application program, wherein the key pair is a manufacturer key pair corresponding to the application program; determining that an integrity verification of the application program passes if the first digest and the second digest are the same, or determining that integrity verification of the application program does not pass if the first digest and the second digest are different; updating the application program, and when receiving an update completion instruction, performing the eigenvalue calculation on updated data of the application program to obtain a third digest of the application program, signing the third digest according to a private key in the key pair to obtain a new digital signature of the application program, and storing the new digital signature of the application program; performing the eigenvalue calculation on data of the application program when the application program starts, to obtain a fourth digest of the application program; decrypting the stored new digital signature of the application program according to the public key to obtain the third digest of the application program; and determining that the integrity verification of the application program passes if the fourth digest and the third digest are the same, or determining that the integrity verification of the application program does not pass if the fourth digest and the third digest are different. when obtaining a program package of an application program, storing a digital signature of the application program in the program package, wherein the program package includes the digital signature and data of the application program, wherein the digital signature is obtained, by a manufacturer, by signing a first digest of the application program using a private key of the manufacturer, wherein the first digest is obtained, by the manufacturer, by performing an eigenvalue calculation on the data of the application program; performing the eigenvalue calculation on the data of the application program when the application program starts, to obtain a second digest of the application program; decrypting the stored digital signature using a public key in an embedded key pair, to obtain the first digest of the application program, wherein the key pair is a manufacturer key pair corresponding to the application program; determining that an integrity verification of the application program passes if the first digest and the second digest are the same, or determining that integrity verification of the application program does not pass if the first digest and the second digest are different; performing the eigenvalue calculation on the data of the application program when the application program starts, to obtain a second digest of the application program; decrypting the stored digital signature using a public key in an embedded key pair, to obtain the first digest of the application program, wherein the key pair is a manufacturer key pair corresponding to the application program; determining that an integrity verification of the application program passes if the first digest and the second digest are the same, or determining that integrity verification of the application program does not pass if the first digest and the second digest are different; updating the application program, and when receiving an update completion instruction, performing the eigenvalue calculation on updated data of the application program to obtain a third digest of the application program, signing the third digest according to a private key in the key pair to obtain a new digital signature of the application program, and storing the new digital signature of the application program; performing the eigenvalue calculation on data of the application program when the application program starts, to obtain a fourth digest of the application program; decrypting the stored new digital signature of the application program according to the public key to obtain the third digest of the application program; and determining that the integrity verification of the application program passes if the fourth digest and the third digest are the same, or determining that the integrity verification of the application program does not pass if the fourth digest and the third digest are different.