The invention relates to a user identity confirmation method in secure information processing. The method comprises the following steps: receiving a secure request sent by a terminal through a server, wherein the secure request carriers a user identifier; acquiring a corresponding risk value according to the secure request; detecting whether the risk value reaches a preset risk value, if the risk value reaches the preset risk, sending an identity confirmation instruction to the terminal, enabling the terminal to call a camera to shoot an image according to the identity confirmation instruction, and sending the image to the server; receiving the shot image sent by the terminal through the server; acquiring the identity card negative of a corresponding user from an information database of a public security system according to the user identifier; judging whether the similarity of the image and the identity card negative reaches the first preset threshold value; and executing the operation corresponding to the secure request if the similarity reaches the first preset threshold value. Furthermore, the invention correspondingly provides a user identity confirmation device in the secure information processing.