A key processing method performed by a terminal in dual connectivity mode, wherein the method comprises: receiving, the terminal that has a communication connection to a first base station and a communication connection to a second base station, a RRC reconfiguration message from the first base station, wherein the RRC reconfiguration message is used to instruct the terminal to update a key used for communicating with the first base station and to update a key used for communicating with the second base station; updating, by the terminal according to the RRC reconfiguration message, the key used for communicating with the first base station and the key used for communicating with the second base station, comprising: generating a new access security management entity key K ASME2 in response to the RRC reconfiguration message; generating a new security key K eNB2 according to the K ASME2 and a new COUNT value of a non-access stratum; generating a new key used for communicating with the first base station according to the K eNB2 and a security algorithm of the first base station; generating a new key used for communicating with the second base station according to the K eNB2 and a security algorithm of the second base station; and sending, by the terminal to the first base station, a RRC reconfiguration complete message, wherein the RRC reconfiguration complete message is used to notify that keys updating has been completed. receiving, the terminal that has a communication connection to a first base station and a communication connection to a second base station, a RRC reconfiguration message from the first base station, wherein the RRC reconfiguration message is used to instruct the terminal to update a key used for communicating with the first base station and to update a key used for communicating with the second base station; updating, by the terminal according to the RRC reconfiguration message, the key used for communicating with the first base station and the key used for communicating with the second base station, comprising: generating a new access security management entity key K ASME2 in response to the RRC reconfiguration message; generating a new security key K eNB2 according to the K ASME2 and a new COUNT value of a non-access stratum; generating a new key used for communicating with the first base station according to the K eNB2 and a security algorithm of the first base station; generating a new key used for communicating with the second base station according to the K eNB2 and a security algorithm of the second base station; and sending, by the terminal to the first base station, a RRC reconfiguration complete message, wherein the RRC reconfiguration complete message is used to notify that keys updating has been completed. generating a new access security management entity key K ASME2 in response to the RRC reconfiguration message; generating a new security key K eNB2 according to the K ASME2 and a new COUNT value of a non-access stratum; generating a new key used for communicating with the first base station according to the K eNB2 and a security algorithm of the first base station; generating a new key used for communicating with the second base station according to the K eNB2 and a security algorithm of the second base station; and sending, by the terminal to the first base station, a RRC reconfiguration complete message, wherein the RRC reconfiguration complete message is used to notify that keys updating has been completed.