Terminal device initial key distribution method and apparatus for minimizing key management cost

The present invention provides a terminal device initial key distribution method and apparatus for minimizing key management cost, wherein the terminal device initial key distribution method includesthe following steps: writing non-confidential data in a terminal device and a management node respectively in an offline environment; performing an online interaction process to implement terminal device identity authentication; and performing the online interaction process to implement management node identity authentication and initial key distribution. The terminal device initial key distribution method of the present invention can realize the distribution of the terminal device initial key without the PKI system or the symmetric key management system and the key issuing device. The characteristics of the DH key agreement protocol are used to realize the initial key distribution without any preset keys, and the two-way identity authentication mechanism is designed to solve the problem that the DH protocol does