A method for anonymous entity identification, characterized in that, the method comprises the following steps: 1) sending, by an entity A, a first message to an entity B, wherein the first message comprises a random number R A generated by the entity A; 2) returning, by the entity B, a second message to the entity A after receiving the first message, wherein the second message comprises an identity I GB of a second group and a token field TokenBA containing a signature of the entity B including a distinguishing identifier GB of the second group and the random number R A, and the entity B resides in the second group; 3) sending, by the entity A, a third message to a trusted third party TP after receiving the second message, wherein the third message comprises the identity I GB; 4) checking, by the trusted third party TP, the second group for legality according to the I GB after receiving the third message; 5) returning, by the trusted third party TP, a fourth message to the entity A after checking the second group for legality, wherein the fourth message comprises a verification result Res GB of the second group; and 6) identifying, by the entity A, identity of the entity B according to the verification result Res GB in the fourth message and the token field TokenBA after receiving the fourth message and verifying the fourth message for validity; wherein in the step 6), identifying the identity of the entity B according to the verification result Res GB in the fourth message and the token field TokenBA specifically comprises: then obtaining, by the entity A, the verification result Res GB of the second group, and if the second group is determined to be legal and valid according to the Res GB, obtaining, by the entity A, a public key PublicKey GB of the second group, verifying the signature of the entity B in the TokenBA in the second message and checking whether the random number R A in the first message is consistent with the random number R A contained in the signature of the entity B in the TokenBA to thereby finish the identity identification of the entity B, otherwise, finishing, by the entity A, the identity identification of the entity B. 1) sending, by an entity A, a first message to an entity B, wherein the first message comprises a random number R A generated by the entity A; 2) returning, by the entity B, a second message to the entity A after receiving the first message, wherein the second message comprises an identity I GB of a second group and a token field TokenBA containing a signature of the entity B including a distinguishing identifier GB of the second group and the random number R A, and the entity B resides in the second group; 3) sending, by the entity A, a third message to a trusted third party TP after receiving the second message, wherein the third message comprises the identity I GB; 4) checking, by the trusted third party TP, the second group for legality according to the I GB after receiving the third message; 5) returning, by the trusted third party TP, a fourth message to the entity A after checking the second group for legality, wherein the fourth message comprises a verification result Res GB of the second group; and 6) identifying, by the entity A, identity of the entity B according to the verification result Res GB in the fourth message and the token field TokenBA after receiving the fourth message and verifying the fourth message for validity; wherein in the step 6), identifying the identity of the entity B according to the verification result Res GB in the fourth message and the token field TokenBA specifically comprises: then obtaining, by the entity A, the verification result Res GB of the second group, and if the second group is determined to be legal and valid according to the Res GB, obtaining, by the entity A, a public key PublicKey GB of the second group, verifying the signature of the entity B in the TokenBA in the second message and checking whether the random number R A in the first message is consistent with the random number R A contained in the signature of the entity B in the TokenBA to thereby finish the identity identification of the entity B, otherwise, finishing, by the entity A, the identity identification of the entity B.