A method includes: obtaining an image of a graphic code from a scanning device that scans the graphic code displayed on a user terminal of a user; extracting, from the image of the graphic code, graphic code information encoded in the graphic code; verifying signature information in the graphic code information, wherein the graphic code information comprises the signature information, at least one piece of identity information of the user, and service permission information of multiple services; determining whether the at least one piece of identity information of the user matches identity information accepted by a service provider corresponding to the scanning device; determining whether the service permission information of multiple services of the graphic code information matches service permission information of a service supported by the scanning device; and executing the service.