The present application provides a photon-based CA authentication method, including: receiving, by a photon-based CA authentication terminal, an optical signal from a photon terminal, where the optical signal includes a user ID; verifying the user ID included in the optical signal; and providing, in response to successful user ID verification, a user certificate to a client to perform CA certificate authentication.