OAUTH protocol based method and system for bidirectional authentication

The invention discloses an OAUTH protocol based method and system for bidirectional authentication. The method comprises: an open platform receives an authentication request message, which is sent by a user, of an OAuth protocol, the parameter in the authentication request message comprising the sign CONSUMED_KEY of an consumed party device; the open platform, according to the CONSUMED-KEY, sends a CONSUMED_SECRET to the consumed party device for authentication; after the authentication of the consumed party device succeeds, a response message is sent to the open platform, the response message sent to the open platform comprising a CONSUMED_TOKEN of the consumed party device; and the open platform sends the CONSUMED_TOKEN to the user. The method and system provided by the invention improve a conventional unidirectional authentication method only for an open interface, provide both authentication for an open interface consuming party and authentication for an open interface consumed party, and satisfy actual service development demands.