The invention relates to an object-oriented security
chip and an
encryption method thereof. The security
chip comprises a
central processing unit (CPU), a symmetric cryptographic
algorithm unit, an asymmetric cryptographic
algorithm unit, a
communication unit, a security protection unit, a data storage unit, an interruption source and a
timer / counter, wherein the CPU is used for coordinating other functional modules in the security
chip to ensure the normal operation; the symmetric cryptographic
algorithm unit is used for implementing
encryption and decryption operations on the data by adopting a national secret symmetric cryptographic algorithm; the asymmetric cryptographic algorithm unit is used for achieving signing and signature
verification of digital certificates and calculating message abstracts and key negotiations between two communication parties by adopting a national secret asymmetric cryptographic algorithm; the
communication unit is used for performing data communication; the security protection unit is used for guaranteeing the normal operation of the security chip; the data storage unit is used for storing keys; the interruption source is used for initiating an event interruption request to the CPU; and the
timer / counter is used for counting and timing during the operation of the security chip. The
encryption method of the security chip comprises the following steps: separately establishing a transmission layer security link and an
application layer security link, and achieving the
secure transmission of the information by adopting a transmission layer and
application layer dual-layer
protection mechanism.