A system for processing two-dimensional barcodes, wherein the system comprises: client software, configured to send an electronic credential acquisition request to a server, wherein the electronic credential acquisition request comprises a user identifier; the server, configured to receive (101, 503) the electronic credential acquisition request sent by the client software, and obtain an electronic credential from a credential verification end device based on the user identifier; and the credential verification end device, configured to receive and respond to request information for obtaining an electronic credential sent by the server, and send the electronic credential to the server, wherein the server is further configured to receive the electronic credential sent by the credential verification end device, sign the electronic credential and a user public key of the client software with a private key of the server to obtain server signature information, and send the server signature information and the electronic credential to the client software; the client software is configured to receive (301, 509) the server signature information and the electronic credential that are sent by the server, verify the server signature information to obtain the electronic credential, obtain a user key that corresponds to the user public key, sign (303, 511) the electronic credential by using the user key to obtain client software signature information, and generate a two-dimensional barcode based on predetermined security information, the client software signature information, the server signature information, the electronic credential, and the user public key; and the credential verification end device is configured to obtain the two-dimensional barcode in the client software, verify (402, 512) validity duration of the predetermined security information, and verify the client software signature information and the server signature information; and if verification on each of the predetermined security information, the client software signature information, and the server signature information succeeds, obtain (403, 513) a service validity time comprised in the electronic credential for verification, and if verification on the service validity time comprised in the electronic credential succeeds, determine that verification on the electronic credential succeeds. client software, configured to send an electronic credential acquisition request to a server, wherein the electronic credential acquisition request comprises a user identifier; the server, configured to receive (101, 503) the electronic credential acquisition request sent by the client software, and obtain an electronic credential from a credential verification end device based on the user identifier; and the credential verification end device, configured to receive and respond to request information for obtaining an electronic credential sent by the server, and send the electronic credential to the server, wherein the server is further configured to receive the electronic credential sent by the credential verification end device, sign the electronic credential and a user public key of the client software with a private key of the server to obtain server signature information, and send the server signature information and the electronic credential to the client software; the client software is configured to receive (301, 509) the server signature information and the electronic credential that are sent by the server, verify the server signature information to obtain the electronic credential, obtain a user key that corresponds to the user public key, sign (303, 511) the electronic credential by using the user key to obtain client software signature information, and generate a two-dimensional barcode based on predetermined security information, the client software signature information, the server signature information, the electronic credential, and the user public key; and the credential verification end device is configured to obtain the two-dimensional barcode in the client software, verify (402, 512) validity duration of the predetermined security information, and verify the client software signature information and the server signature information; and if verification on each of the predetermined security information, the client software signature information, and the server signature information succeeds, obtain (403, 513) a service validity time comprised in the electronic credential for verification, and if verification on the service validity time comprised in the electronic credential succeeds, determine that verification on the electronic credential succeeds.