A call authentication method, characterized by comprising: a Mobile Management Entity, MME, receiving an emergency call request message carrying an access network identity sent by a user terminal, and carrying the access network identity into a query request to send to a Home Subscriber Server, HSS; the MME receiving a query result carrying verification information and first authentication data returned by the HSS, wherein, the first authentication data are obtained by the HSS performing calculation with a searched security key and randomly generated verification information; the security key comprises a device key; the device key is determined by the HSS according to a locally stored corresponding relation between the access network identity and the device key; the MME receiving second authentication data sent by the user terminal, wherein, the second authentication data are obtained by the user terminal performing calculation with a locally stored security key and verification information after receiving the verification information sent by the MME, wherein the locally stored security key comprises the device key, the device key is determined by the user terminal according to a locally stored corresponding relation between the access network identity and the device key; and the MME comparing the first authentication data and the second authentication data, and when a comparison result is that the first authentication data and the second authentication data are identical, determining that an authentication is passed, and allowing the user terminal to access a communication network; wherein the access network identity is International Mobile Equipment identity, IMEI, of the user terminal. a Mobile Management Entity, MME, receiving an emergency call request message carrying an access network identity sent by a user terminal, and carrying the access network identity into a query request to send to a Home Subscriber Server, HSS; the MME receiving a query result carrying verification information and first authentication data returned by the HSS, wherein, the first authentication data are obtained by the HSS performing calculation with a searched security key and randomly generated verification information; the security key comprises a device key; the device key is determined by the HSS according to a locally stored corresponding relation between the access network identity and the device key; the MME receiving second authentication data sent by the user terminal, wherein, the second authentication data are obtained by the user terminal performing calculation with a locally stored security key and verification information after receiving the verification information sent by the MME, wherein the locally stored security key comprises the device key, the device key is determined by the user terminal according to a locally stored corresponding relation between the access network identity and the device key; and the MME comparing the first authentication data and the second authentication data, and when a comparison result is that the first authentication data and the second authentication data are identical, determining that an authentication is passed, and allowing the user terminal to access a communication network; wherein the access network identity is International Mobile Equipment identity, IMEI, of the user terminal.