A registration method based on a service-based architecture performed by a control network element, the method comprising: • receiving a registration request sent by a function network element, wherein the registration request comprises a security parameter (S 102), wherein the security parameter comprises a token, ∘ wherein the token is generated by a management network element by encrypting a digital signature, a function network element profile, an identifier of the function network element, and a shared key between the function network element and the control network element based on a public key of the control network element, ▪ wherein the digital signature is generated by the management network element by performing a digital signature algorithm on the function network element profile, the identifier of the function network element, and the shared key between the function network element and the control network element based on a private key of the management network element; and • verifying correctness of the security parameter, and determining validity of the registration request based on the correctness of the security parameter (S 103), wherein the verifying correctness of the security parameter comprises: ∘ decrypting the token by using a private key of the control network element, to obtain the digital signature; and ∘ verifying correctness of the digital signature by using a public key of the management network element and signed content, ▪ wherein the signed content comprises the shared key between the function network element and the control network element, the identifier of the function network element, and the function network element profile. • receiving a registration request sent by a function network element, wherein the registration request comprises a security parameter (S 102), wherein the security parameter comprises a token, ∘ wherein the token is generated by a management network element by encrypting a digital signature, a function network element profile, an identifier of the function network element, and a shared key between the function network element and the control network element based on a public key of the control network element, ▪ wherein the digital signature is generated by the management network element by performing a digital signature algorithm on the function network element profile, the identifier of the function network element, and the shared key between the function network element and the control network element based on a private key of the management network element; and • verifying correctness of the security parameter, and determining validity of the registration request based on the correctness of the security parameter (S 103), wherein the verifying correctness of the security parameter comprises: ∘ decrypting the token by using a private key of the control network element, to obtain the digital signature; and ∘ verifying correctness of the digital signature by using a public key of the management network element and signed content, ▪ wherein the signed content comprises the shared key between the function network element and the control network element, the identifier of the function network element, and the function network element profile. ∘ decrypting the token by using a private key of the control network element, to obtain the digital signature; and ∘ verifying correctness of the digital signature by using a public key of the management network element and signed content, ▪ wherein the signed content comprises the shared key between the function network element and the control network element, the identifier of the function network element, and the function network element profile.