A security authentication method, comprising: performing, based on a transmitted password authentication message, password authentication with a server and acquiring a result of the password authentication; sending a request authentication message to the server in a case that the result of the password authentication is determined to indicate that the password authentication is successful, characterized in that, the method further comprises: receiving a response authentication message, returned based on a received request authentication message by the server, comprising a server certificate and a digital signature value, wherein the server certificate comprises a public key of the server, and the digital signature value is acquired based on the request authentication message and the password authentication message; verifying the digital signature value comprised in the response authentication message based on the public key of the server, to acquire a result of security authentication, wherein sending the request authentication message to the server in a case that the result of the password authentication is determined to indicate that the password authentication is successful, specifically comprises: sending the request authentication message to the server in a case that the result of the password authentication is determined to indicate that the password authentication is successful, to trigger the server to perform following steps: performing a hash operation on the password authentication message and the request authentication message to acquire a first hash value, and digitally signing the first hash value based on a local private key to acquire a digital signature value of the request authentication message. performing, based on a transmitted password authentication message, password authentication with a server and acquiring a result of the password authentication; sending a request authentication message to the server in a case that the result of the password authentication is determined to indicate that the password authentication is successful, characterized in that, the method further comprises: receiving a response authentication message, returned based on a received request authentication message by the server, comprising a server certificate and a digital signature value, wherein the server certificate comprises a public key of the server, and the digital signature value is acquired based on the request authentication message and the password authentication message; verifying the digital signature value comprised in the response authentication message based on the public key of the server, to acquire a result of security authentication, receiving a response authentication message, returned based on a received request authentication message by the server, comprising a server certificate and a digital signature value, wherein the server certificate comprises a public key of the server, and the digital signature value is acquired based on the request authentication message and the password authentication message; verifying the digital signature value comprised in the response authentication message based on the public key of the server, to acquire a result of security authentication, wherein sending the request authentication message to the server in a case that the result of the password authentication is determined to indicate that the password authentication is successful, specifically comprises: sending the request authentication message to the server in a case that the result of the password authentication is determined to indicate that the password authentication is successful, to trigger the server to perform following steps: performing a hash operation on the password authentication message and the request authentication message to acquire a first hash value, and digitally signing the first hash value based on a local private key to acquire a digital signature value of the request authentication message. performing a hash operation on the password authentication message and the request authentication message to acquire a first hash value, and digitally signing the first hash value based on a local private key to acquire a digital signature value of the request authentication message.