A security identity discovery method, comprising: sending, by a first station, an identity discovery frame, wherein the identity discovery frame carries an identity code of the first station and target station information, and the target station information comprises a first ciphertext; receiving, by the first station, an identity authentication frame sent by a second station, wherein the identity authentication frame carries an identity code of the second station, the identity code of the first station and a second ciphertext; and authenticating, by the first station, an identity of the second station; characterized by, sending, by the first station, an identity confirmation frame to the second station, wherein the identity confirmation frame carries the identity code of the second station; or the identity confirmation frame carries the identity code of the first station and the identity code of the second station, wherein the first ciphertext is calculated out through a default algorithm 1 according to a medium access control, MAC, address of the first station and an MAC address of a target station to which the identity discovery frame is sent, the second ciphertext is calculated out through a default algorithm 3 according to an MAC address of the second station and a third MAC address, the third MAC address is calculated out by the second station through a default algorithm 2 according to the MAC address of the second station and the first ciphertext, and, the authenticating, by the first station, the identity of the second station, specifically comprises: calculating out, by the first station, a fourth MAC address through a default algorithm 4 according to the MAC address of the first station and the second ciphertext, and authenticating whether the fourth MAC address matches the MAC address of the target station to which the identity discovery frame is sent. sending, by a first station, an identity discovery frame, wherein the identity discovery frame carries an identity code of the first station and target station information, and the target station information comprises a first ciphertext; receiving, by the first station, an identity authentication frame sent by a second station, wherein the identity authentication frame carries an identity code of the second station, the identity code of the first station and a second ciphertext; and authenticating, by the first station, an identity of the second station; characterized by, sending, by the first station, an identity confirmation frame to the second station, wherein the identity confirmation frame carries the identity code of the second station; or the identity confirmation frame carries the identity code of the first station and the identity code of the second station, wherein the first ciphertext is calculated out through a default algorithm 1 according to a medium access control, MAC, address of the first station and an MAC address of a target station to which the identity discovery frame is sent, the second ciphertext is calculated out through a default algorithm 3 according to an MAC address of the second station and a third MAC address, the third MAC address is calculated out by the second station through a default algorithm 2 according to the MAC address of the second station and the first ciphertext, and, the authenticating, by the first station, the identity of the second station, specifically comprises: calculating out, by the first station, a fourth MAC address through a default algorithm 4 according to the MAC address of the first station and the second ciphertext, and authenticating whether the fourth MAC address matches the MAC address of the target station to which the identity discovery frame is sent. calculating out, by the first station, a fourth MAC address through a default algorithm 4 according to the MAC address of the first station and the second ciphertext, and authenticating whether the fourth MAC address matches the MAC address of the target station to which the identity discovery frame is sent.