Operation identification is obtained from a captured barcode. An authentication criterion is determined whether is satisfied. If the authentication criterion is met, the operation identification and stored account information is sent to server for authenticating based on the account information. The authentication criterion includes whether a similarity degree between an image characteristic of a first surrounding image of a barcode and an image characteristic of a second surrounding image of the barcode is larger than or equal to a present threshold. The second surrounding image is an authenticated surrounding image of the barcode such as a surrounding image when the barcode is generated. The present techniques ensure that a successful authentication is possibly returned only when the first surrounding image is in consistent with the second image. It is difficult for the barcode placed on a fake webpage or sent through group sending by a hacker to pass authentication.