A Session key update method and system are provided in the invention. Said method includes: during the fast re-authentication process between a terminal and an authentication server, said terminal and said authentication server generate a new session key according to both fast re-authentication identifier information and key materials used for generating the current session key, and said new session key becomes effective after the success of the fast re-authentication. Said system includes a terminal and an authentication server. Compared with the prior art, the method and system in the invention can reduce the potential security hazard brought by key reuse and enhance the security of a session.
展开▼
