A key processing method performed by a terminal in dual connectivity mode, wherein the method comprises: receiving (S96), the terminal that has a communication connection to a first base station and a communication connection to a second base station, a RRC reconfiguration message from the first base station, wherein the RRC reconfiguration message is used to instruct the terminal to update a key used for communicating with the first base station and to update a key used for communicating with the second base station; updating (S98), by the terminal according to the RRC reconfiguration message, the key used for communicating with the first base station and the key used for communicating with the second base station, comprising: generating a new access security management entity key K ASME2 in response to the RRC reconfiguration message; generating a new security key K eNB2 according to the K ASME2 and a new COUNT value of a non-access stratum (NAS); generating a new key used for communicating with the first base station according to the K eNB2 and a security algorithm of the first base station; generating a new key used for communicating with the second base station according to the K eNB2 and a security algorithm of the second base station; and sending (S99), by the terminal to the first base station, a RRC reconfiguration complete message, wherein the RRC reconfiguration complete message is used to notify that keys updating has been completed. receiving (S96), the terminal that has a communication connection to a first base station and a communication connection to a second base station, a RRC reconfiguration message from the first base station, wherein the RRC reconfiguration message is used to instruct the terminal to update a key used for communicating with the first base station and to update a key used for communicating with the second base station; updating (S98), by the terminal according to the RRC reconfiguration message, the key used for communicating with the first base station and the key used for communicating with the second base station, comprising: generating a new access security management entity key K ASME2 in response to the RRC reconfiguration message; generating a new security key K eNB2 according to the K ASME2 and a new COUNT value of a non-access stratum (NAS); generating a new key used for communicating with the first base station according to the K eNB2 and a security algorithm of the first base station; generating a new key used for communicating with the second base station according to the K eNB2 and a security algorithm of the second base station; and sending (S99), by the terminal to the first base station, a RRC reconfiguration complete message, wherein the RRC reconfiguration complete message is used to notify that keys updating has been completed. generating a new access security management entity key K ASME2 in response to the RRC reconfiguration message; generating a new security key K eNB2 according to the K ASME2 and a new COUNT value of a non-access stratum (NAS); generating a new key used for communicating with the first base station according to the K eNB2 and a security algorithm of the first base station; generating a new key used for communicating with the second base station according to the K eNB2 and a security algorithm of the second base station; and sending (S99), by the terminal to the first base station, a RRC reconfiguration complete message, wherein the RRC reconfiguration complete message is used to notify that keys updating has been completed. <EOS>