The invention discloses a multi-attribute physical layer authentication method and device based on heuristic clustering and a server. The method comprises the following steps: sampling a received signal, extracting multiple PHY features, and constructing an original feature space; Mapping the original feature space to an orthogonal subspace through double principal component analysis; Executing non-parameter local heuristic clustering on the orthogonal subspace, and returning an optimal clustering result; And on the basis of the optimal clustering result, judging whether the currently receivedsignal is legal or not through the Euclidean distance. The device comprises a sampling module, a decorrelation module, a clustering module and an authentication module. The authentication server is provided with the authentication device. According to the method, the feature space is mapped to the orthogonal low-dimensional subspace through principal component analysis, so that the feature authentication stability of the physical layer is improved; A non-parameter clustering algorithm based on split energy and combined energy is provided, the number of clusters can be automatically determined, and extremely high authentication performance is achieved with extremely low complexity.