Some quantum identity authentication(QIA) protocols enable both communication parties to authenticate each other by sharing entanglement or identity keys beforehand and they always go without a certificated authority(CA). Such kind of authentication structure is simple but not easy to extend into integrated network. An authority-based secure QIA protocol is proposed using the robust entanglement of W state. With the help of CA, two legitimated communication parties can identify each other faithfully and simultaneously share the entangled particles for later controlled communication. Security analysis shows that QIA remains secure even confront with several typical individual attacks. The authority-based model ensures the security complete with expandability, practicality and controllability.