A service authorization method, wherein a system of a device comprises at least a first security environment and a second security environment, a first execution unit runs in the first security environment, a second execution unit runs in the second security environment, and the method comprises: obtaining (SI00), by the first execution unit and through a service application, information to be verified, wherein the first execution unit and the service application are running in the first security environment; verifying, by the first execution unit, the information to be verified and obtaining a verification result of the information to be verified; obtaining, by the first execution unit and through the service application, a dynamic parameter sent by the second execution unit, wherein the dynamic parameter is associated with a validity time; signing, by the first execution unit, the verification result and the dynamic parameter by means of a signature verification private key to obtain signature information; obtaining, by the second execution unit and through the service application, the signature information; verifying, by the second execution unit that runs in the second security environment, the signature information by means of a signature verification public key corresponding to the signature verification private key; verifying, by the second execution unit and after it is determined that the verification on the signature information succeeds, the dynamic parameter obtained by parsing the signature information, comprising comparing, within the validity time, the dynamic parameter obtained by parsing the signature information with a pre-stored copy of the dynamic parameter; and performing, by the second execution unit and after it is determined that the verification on the dynamic parameter succeeds, service authorization based on the verification result. obtaining (SI00), by the first execution unit and through a service application, information to be verified, wherein the first execution unit and the service application are running in the first security environment; verifying, by the first execution unit, the information to be verified and obtaining a verification result of the information to be verified; obtaining, by the first execution unit and through the service application, a dynamic parameter sent by the second execution unit, wherein the dynamic parameter is associated with a validity time; signing, by the first execution unit, the verification result and the dynamic parameter by means of a signature verification private key to obtain signature information; obtaining, by the second execution unit and through the service application, the signature information; verifying, by the second execution unit that runs in the second security environment, the signature information by means of a signature verification public key corresponding to the signature verification private key; verifying, by the second execution unit and after it is determined that the verification on the signature information succeeds, the dynamic parameter obtained by parsing the signature information, comprising comparing, within the validity time, the dynamic parameter obtained by parsing the signature information with a pre-stored copy of the dynamic parameter; and performing, by the second execution unit and after it is determined that the verification on the dynamic parameter succeeds, service authorization based on the verification result. <EOS>