Secure communication portable device and system

Abstract

The invention provides a safety communication portable device and system, and relates to the technical field of data safety processing, and the device is provided with a communication interface used for being connected to a target terminal, so that a preset working system is operated on the target terminal after the device is connected with the target terminal; establishing communication with other communication equipment through the target terminal; in the working system, the built-in security hardware is used for executing autonomous data encryption and decryption, and ciphertext transmission is carried out between the target terminal and other communication equipment, so that the problems that an existing data encryption scheme depends on encryption and decryption software, most of data encryption schemes need to be additionally installed, and portability and security are poor are solved.

Description

Technical Field

[0001] The present invention relates to the technical field of data security processing, and in particular to a portable secure communication device and system. Background Art

[0002] With the development of science and technology and the advancement of informatization, people have an increasing demand for secure communications. On the one hand, the digital transformation process of various industries has accelerated, and business, transactions and communications have been widely integrated into the digital environment, increasing the demand for data security and privacy protection; on the other hand, with the increase in remote office scenarios, more important data needs to be transmitted remotely through the Internet, and communication risks have further increased. As a key component for protecting sensitive information, core data, maintaining privacy, and preventing data leaks and cyber attacks, secure communications are constantly changing with technological development.

[0003] Traditional communication security protocols use soft encryption. On the one hand, the security of soft encryption is limited and it is vulnerable to man-in-the-middle attacks during transmission. When the host system is attacked and invaded, soft encryption is extremely vulnerable to threats and security cannot be effectively guaranteed. On the other hand, it has performance bottlenecks. The encryption and decryption process requires calculations, which affects system performance at high throughput and is difficult to meet requirements. At the same time, it relies on host computing resources.

[0004] In order to solve the limitation of soft encryption, hardware encryption solutions have emerged, such as encryption cards and bank U shields. However, the encryption card hardware encryption mode often relies on the built-in security hardware in the computer device, or requires the separate configuration of additional hardware expansion devices, which has high modification costs and prices. When using the bank U shield, it is necessary to install the driver in the system and complete the corresponding user configuration before the U shield can be used. The encryption and decryption operations of the U shield are performed in user mode and rely on the operating system and system permission restrictions of the connected device. There are limitations in applications involving high security and performance requirements. Summary of the invention

[0005] In order to overcome the above technical defects, the purpose of the present invention is to provide a portable secure communication device and system to solve the problem that existing data encryption schemes rely on encryption software, most of which require additional installation programs and have poor portability and security.

[0006] The present invention discloses a portable device for secure communication:

[0007] Setting a communication interface for connecting to a target terminal so that a preset working system can be run on the target terminal after connecting to the target terminal;

[0008] Establishing communication with other communication devices through the target terminal;

[0009] Autonomous data encryption and decryption are performed within the working system using built-in security hardware, and ciphertext is transmitted between the target terminal and other communication devices.

[0010] Preferably, it includes:

[0011] A main control module, used to receive or issue instructions to control the operation of the portable safety communication device;

[0012] An encryption and decryption module, used to encrypt or decrypt data;

[0013] A key module, used for randomly generating, receiving or storing keys;

[0014] The communication interface module is connected to the communication interface to send or receive data and instructions.

[0015] Preferably, it also includes: a storage module for storing data.

[0016] Preferably, the key module is configured through security hardware built into the secure communication portable device.

[0017] Preferably, the secure communication portable device performs encryption and decryption of data in kernel mode.

[0018] The present application also provides a portable secure communication system, comprising:

[0019] At least one target terminal and one other communication device, the target terminal being connected to any one of the portable secure communication devices described above;

[0020] Running the working system of the portable device for secure communication on the target terminal;

[0021] A secure communication connection is established between the target terminal and other communication equipment through protocol exchange, and the secure communication portable device uses built-in security hardware to perform autonomous data encryption and decryption, and transmits ciphertext between the target terminal and other communication equipment.

[0022] Preferably, the other communication devices support standard communication protocols;

[0023] Or, the other communication equipment is connected to the secure communication portable device.

[0024] Preferably, in the working system, the main control module controls the key module to generate a key, and sends the key to the other communication device through the target terminal for encryption and decryption of data;

[0025] Or, receiving a key sent by other communication devices and storing it in the key module for use in encrypting and decrypting data.

[0026] Preferably, under the working system, an encryption and decryption module is used to encrypt data based on the key, and the ciphertext is returned to the main control module, so that the ciphertext is sent to other communication devices through the target terminal;

[0027] And, receiving ciphertext sent by other communication devices through the target terminal, using the encryption and decryption module to decrypt the received ciphertext, and returning it to the main control module.

[0028] Preferably, a storage module is accessed under the working system;

[0029] The data or ciphertext is stored in the storage module or read from the storage module through the main control module.

[0030] Compared with the prior art, the above technical solution has the following beneficial effects:

[0031] The present application provides a portable secure communication device and system, which are connected to a target terminal via a communication interface and have built-in secure hardware, including a communication interface module, a main control module, a key module, and an encryption and decryption module. After being connected to the target terminal, a preset working system is run on the target terminal, and autonomous data encryption and decryption is performed through the secure hardware in the working system. After communication is established between the target terminal and other communication devices, ciphertext transmission is performed between the target terminal and other communication devices. The device and system may include communication between multiple terminals and integrate multiple working environments, without the need to expand equipment and install software. The security of communication can be guaranteed in any environment, and secure and portable data encryption processing is achieved. At the same time, encryption and decryption operations on communication transmission data are completed in the kernel state, and ciphertext transmission is used to greatly reduce the delay of encryption and decryption operations. A large amount of data can be processed with high throughput, and encryption and decryption operations can be performed without reducing system performance, thereby achieving secure and high-speed data, and solving the problem that existing data encryption solutions rely on server software, most of which require additional installation programs, and have poor portability and security. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] Figure 1 This is a schematic diagram of the application of the portable secure communication device in Embodiment 1 or 2 of the portable secure communication device and system of the present invention;

[0033] Figure 2 A schematic diagram of modules of a portable secure communication device in Embodiment 1 or 2 of a portable secure communication device and system according to the present invention;

[0034] Figure 3 It is a schematic diagram of the communication between a target terminal and another target terminal / other communication equipment in Embodiment 1 or 2 of a portable secure communication device and system according to the present invention.

[0035] Reference numerals:

[0036] 1- portable secure communication device; 11- main control module; 12- communication interface module; 13- key module; 14- encryption and decryption module. DETAILED DESCRIPTION

[0037] The advantages of the present invention are further described below in conjunction with the accompanying drawings and specific embodiments.

[0038] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present disclosure. Instead, they are merely examples of devices and methods consistent with some aspects of the present disclosure as detailed in the appended claims.

[0039] The terms used in this disclosure are for the purpose of describing specific embodiments only and are not intended to limit the disclosure. The singular forms of "a", "said" and "the" used in this disclosure and the appended claims are also intended to include plural forms unless the context clearly indicates otherwise. It should also be understood that the term "and / or" used herein refers to and includes any or all possible combinations of one or more associated listed items.

[0040] It should be understood that although the terms first, second, third, etc. may be used in the present disclosure to describe various information, such information should not be limited to these terms. These terms are only used to distinguish the same type of information from each other. For example, without departing from the scope of the present disclosure, the first information may also be referred to as the second information, and similarly, the second information may also be referred to as the first information. Depending on the context, the word "if" as used herein may be interpreted as "at the time of" or "when" or "in response to determining".

[0041] In the description of the present invention, it is necessary to understand that the terms "longitudinal", "lateral", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside", etc., indicating the orientation or position relationship, are based on the orientation or position relationship shown in the accompanying drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the present invention.

[0042] In the description of the present invention, unless otherwise specified and limited, it should be noted that the terms "installed", "connected" and "connected" should be understood in a broad sense. For example, it can be a mechanical connection or an electrical connection, or it can be the internal connection between two components. It can be a direct connection or an indirect connection through an intermediate medium. For ordinary technicians in this field, the specific meanings of the above terms can be understood according to the specific circumstances.

[0043] In the following description, the suffixes such as "module", "component" or "unit" used to represent elements are only used to facilitate the description of the present invention, and have no specific meanings. Therefore, "module" and "component" can be used interchangeably.

[0044] Embodiment 1: This embodiment provides a portable secure communication device with built-in secure hardware (including the key module and encryption / decryption module described below) and an integrated user work environment. The portable secure communication device can be run on any computer device at any time and anywhere. During the communication process, the built-in secure hardware of the portable secure communication device is directly used for ciphertext transmission. Encryption through secure hardware is more secure and more efficient. In addition, the work environment is integrated in the portable secure device, and encryption can be achieved without additional configuration. This solves the problem that the existing data encryption solution relies on server resources, has high requirements on computer device performance, requires additional installation of encryption software programs, and has poor portability. Figure 1-Figure 3 , specifically:

[0045] A communication interface for connecting to a target terminal (such as a general PC) is provided so that a preset working system can be run on the target terminal after connecting to the target terminal; for example, the communication interface can be a USB interface, or an interface that cooperates with a SATA or PCIe interface inside the target terminal (such as a PC). It should also be noted that the preset working system in the secure communication portable device is to run the working system (such as an independently set isos) on the secure communication portable device after the target terminal is connected. The secure communication portable device integrates the user's working environment and supports one or more working systems / operating systems for selection, such as Debian live, isos, Windows, MacOS, etc. It has all user data. When a working system is configured, a certain working system can be run according to the user's choice.

[0046] In addition, in order to improve the security of using the portable secure communication device, after connecting to the target terminal, the user login page will be entered. The user enters his personal user name and login password to enter the work desktop, and then performs the following communication, data encryption and decryption, data transmission and other operations. The user login information needs to be securely verified, and other verification methods such as fingerprint recognition and facial recognition can also be set, which can be selected according to the actual usage scenario.

[0047] The target terminal establishes communication with other communication devices; the other communication devices may include but are not limited to mobile terminals, such as mobile phones, or servers, etc., and the other communication devices support standard communication protocols; specifically, the two communicating parties (i.e., the target terminal and other communication devices) may conduct handshake negotiations to negotiate and establish the connection protocol version, session ID, encryption algorithm, etc. This process completes the basic information negotiation link in the early stage of establishing a secure communication connection handshake protocol. Or this may also enable the other communication devices to connect to the secure communication portable device for encrypted communication and the following encrypted data transmission.

[0048] The secure communication portable device provided in this embodiment is that after the target terminal is connected through the communication interface, the working system on the secure communication portable device is run on the target terminal, that is, the target terminal provides hardware support for the secure communication portable device, and at the same time, data is transmitted between other communication devices, that is, the data in the secure communication portable device can be interacted / exchanged with other communication devices through the target terminal. As a supplement, in this process, the other communication device can be another target terminal (that is, one party is the receiver and the other party is the sender), which can be connected to the secure communication portable device or not.

[0049] In the working system, built-in security hardware is used to perform autonomous data encryption and decryption, and ciphertext is transmitted between the target terminal and other communication devices. The working system is pre-installed in the above-mentioned secure communication portable device, and encryption and decryption operations are performed in the secure communication portable device through the built-in security hardware, and the ciphertext is transmitted for data transmission, a secure transmission channel is established, and the confidentiality and integrity of the communication are ensured, while the encryption and decryption performance is improved without occupying the resources in the target terminal. In addition, when the above-mentioned target terminal communicates with other communication devices (supporting standard protocol communication) that are not connected to the secure communication portable module, the secure communication portable device can generate a key and synchronize it to other communication devices for ciphertext transmission. Due to the hardware encryption in the secure communication portable module, instead of generating keys on other communication devices as in the existing software / application, the security of the transmission process is improved.

[0050] Also as an example (such as Figure 3 ): The sender (target terminal) sends a key generation instruction through the communication interface module, the security hardware generates a session key through the key module, and calls the encryption and decryption module to encrypt the session key using the public key of the receiver (other communication devices connected to the secure communication portable module), returns the result to the main control module, and sends the ciphertext data to the target terminal (PC), which is then sent to the receiver by the target terminal (PC); after the receiver receives the ciphertext data, it sends it to the main control module through the communication interface module, and calls the encryption and decryption module to decrypt the data using the receiver's private key to obtain the session key. All data transmission is encrypted.

[0051] Specifically, Figure 2 In order to realize the above-mentioned autonomous data encryption and decryption and ciphertext transmission, the secure communication portable device provided in this embodiment includes: a main control module, used to receive or issue instructions to control the operation of the secure communication portable device; an encryption and decryption module, used to encrypt or decrypt data; a key module, used to randomly generate, receive or store keys, and the key module is configured through the built-in security hardware of the secure communication portable device; a communication interface module, connected to the communication interface to send or receive data and instructions.

[0052] Specifically, the communication interface module is used to connect to the PC, and is internally connected to the main control module to transmit communication commands and data to the main control module. The main control module is responsible for coordinating and controlling the key module and the encryption and decryption module, receiving data and commands from the communication interface module, and sending commands and data to the external PC through the communication interface module. The received key commands and data are sent to the key module; the received encryption and decryption commands are sent to the encryption and decryption module; the received files and other data are sent to the storage module. The key module is responsible for random number generation and key processing, returning the results to the main control module, and configuring keys for the encryption and decryption module. The encryption and decryption module is responsible for the encryption and decryption of data and files.

[0053] Based on the above, the main control module controls the operation of the encryption and decryption module, the key module, and the communication interface module through instructions, thereby realizing the above autonomous data encryption and decryption, the transmission of encrypted data through the communication interface module, etc. It should be noted that since the secure communication portable module runs the working system on it, the data processing is performed through the encryption and decryption module therein, and it is realized through built-in hardware, so the secure communication portable device can also be configured to perform data encryption and decryption in the kernel state. That is, by using the encryption and decryption function of the hardware, the encryption and decryption operation is sunk to the kernel state, and the hardware device has physical isolation, which can prevent security risks generated in the form of side channel attacks, etc., and obtain a higher level of security. Through secure hardware (i.e., the key module), secure key storage and management can be performed to ensure that the key is not easily subject to the threat of leakage and theft; the hardware encryption and decryption operation based on the above encryption and decryption module is difficult to be tampered with, has a stronger resistance to attacks by malware and attackers, and significantly improves the security of the data operation process.

[0054] Furthermore, as an illustration, based on the security hardware formed by the above-mentioned encryption and decryption modules, key modules, and communication interface modules, performing encryption and decryption operations will not significantly reduce the performance of the working system, nor will it occupy the resources of the target terminal. It can encrypt and decrypt data faster and improve communication efficiency. It can greatly reduce the delay of encryption and decryption operations, which is very important for data transmission that requires real-time data transmission and is sensitive to response time, and can well meet the transmission performance requirements of real-time communication, video streaming, etc. At the same time, the security hardware also provides higher throughput, which significantly improves communication performance when processing large amounts of data.

[0055] In a preferred embodiment, the portable secure communication device may further include: a storage module ( Figure 2 The storage module is not shown in the figure) and is used to store data. Optionally, the storage module can be configured in the secure communication portable device (similar to a storage box, etc.), or it can be connected to the main control module through hardware, or it can be remotely configured through the network and can be remotely accessed. Specifically, the capacity of the storage module can be configured according to the actual application scenario. As an example, after the above-mentioned working system is running, the system partition and persistent data partition (which is connected to the storage module) of the secure communication portable device can be automatically mounted to store data in the persistent data partition.

[0056] In this embodiment, the portable secure communication device can be a USB flash drive or a storage medium such as a removable solid-state hard drive. The built-in security hardware provides a series of functions such as encryption and decryption, key storage and management, and random number generation for the secure communication module. The security hardware includes the above-mentioned communication interface module, main control module, key module, and encryption and decryption module.

[0057] The portable secure communication device provided in this embodiment integrates the user's working environment and can be started and run on any target terminal (personal computer or laptop). The user can use the device on computers in any environment to store all user data. The working environment including the operating system and application software are unified. Built-in security hardware is used to implement data processing and ciphertext transmission. It does not rely on the resources of the target terminal and does not change the software environment of the target terminal itself. It directly uses the random number generation, key and encryption and decryption algorithms provided by the built-in security hardware to establish a secure and reliable communication link during the communication process, encrypt user data and file transfers, and does not require additional equipment and configuration, completing secure communication at a low cost.

[0058] Embodiment 2: This embodiment also provides a secure communication portable system, which uses the secure communication portable device in the above embodiment 1 to call the random number generation and encryption and decryption function modules provided by the secure communication portable device during the process of establishing a communication connection, without the need to expand the device and install software on the target terminal and / or other communication devices, and complete the encryption and decryption operations of the communication transmission data in the kernel state, thereby achieving efficient and secure data communication. For details, see Figure 1-Figure 3 ,include:

[0059] At least one target terminal and one other communication device, the target terminal is connected to the portable secure communication device described in the first embodiment; the working system of the portable secure communication device (such as an independently set ISO system) is run on the target terminal; the other communication device supports a standard communication protocol, or the other communication device is connected to the portable secure communication device, a secure communication connection is established between the target terminal and the other communication device through protocol exchange, the portable secure communication device uses built-in security hardware to perform autonomous data encryption, obtains ciphertext, and transmits the ciphertext between the target terminal and the other communication device.

[0060] As an illustration, in this embodiment and the above-mentioned embodiment 1, the target terminal and the other communication device can be the same type of terminal, such as both are personal PCs, but they are not the same terminal. In this embodiment, the target terminal and the other communication device are only used to distinguish between the two terminals, and the target terminal is a terminal connected to the secure communication portable device, and the other communication device is a terminal that can be optionally connected or not connected to the secure communication portable device. When the communication portable device is not connected, it only needs to support the standard communication protocol. The target terminal and the other communication device are respectively the sender and the receiver, and can also be optionally interchanged, and can include optional multiple senders or multiple receivers. That is, optionally, the secure communication portable device in the above-mentioned embodiment 1 can also be connected to the other communication device.

[0061] The above-mentioned operation of the working system of the secure communication portable device on the target terminal requires that the secure communication portable device be connected to the communication interface of the PC. When the PC is turned on, the working system in the secure communication portable device is loaded. After the system is started, the system partition and persistent data partition (which can be used to store data) of the secure communication portable device can be automatically mounted, and the user login page can be entered. The user enters his personal user name and login password to enter the work desktop. After the user information is passed, the above-mentioned communication, encryption and decryption, data transmission and other operations are performed to improve the security of the use process.

[0062] It should also be noted that other communication devices support standard communication protocols, and the above-mentioned target terminal and other communication devices establish a secure communication connection through protocol exchange. As an example, the two parties can conduct a handshake negotiation to negotiate and establish a connection protocol version, session ID, encryption algorithm (such as symmetric encryption or asymmetric encryption, and other existing encryption algorithms can also be used for this), etc. This process completes the basic information negotiation link in the early stage of establishing a secure communication connection handshake protocol. It can also be other commonly used communication establishment methods. The focus is on synchronizing encryption algorithms and keys so that encryption and decryption operations can be performed separately on each sender and receiver after data transmission.

[0063] In this embodiment, under the working system, the main control module controls the key module to generate a key, and sends it to the other communication devices through the target terminal for encryption or decryption of data; or, receives the key sent by other communication devices, stores it in the key module, and uses it to encrypt or decrypt data. That is, the target terminal can be the sender or the receiver. When the target terminal is the sender, the key is generated by the key module and then synchronized to the receiver. At this time, the other communication device of the receiver can be connected to a secure communication portable device or not. When the target terminal is the receiver, the sender generates a key through the key module and then synchronizes it to the receiver. It is preferred to use other communication devices connected to the secure communication portable device to improve the security of the key.

[0064] Furthermore, in this embodiment, after the above-mentioned key synchronization, the encryption and decryption module can be used to encrypt and decrypt data. Specifically, in the working system, the encryption and decryption module is used to encrypt data based on the key, and the ciphertext is returned to the main control module, so that the ciphertext can be sent to other communication devices through the target terminal; and the ciphertext sent by other communication devices is received through the target terminal, and the encryption and decryption module is used to decrypt the received ciphertext and return it to the main control module.

[0065] Based on the above, as an example, see Figure 3 , take two target terminals (i.e. both connected to secure communication portable devices) as the initiator and receiver respectively as an example: the secure communication portable devices are connected to the target terminals respectively, and run their own working systems on each target terminal, the communicating parties conduct handshake negotiation, the initiator sends a key generation instruction through the communication interface module, generates a session key through the key module, and calls the encryption and decryption module to encrypt the session key using the receiver's public key, returns the result to the main control module, and sends the ciphertext data to the target terminal, which is then sent to the receiver; after the receiver receives the ciphertext data, it sends it to the main control module through the communication interface module, and calls the encryption and decryption module to decrypt the data using the receiver's private key to obtain the session key.

[0066] During the data communication process, the target terminal PC sends the plaintext data to be sent to the secure communication portable device. The main control module calls the encryption and decryption module, uses the session key to encrypt the data, and returns the encrypted ciphertext data to the sender's target terminal PC. The sender sends the data in ciphertext form; after the receiver receives the communication data, the ciphertext is sent to the secure communication portable device. The security module calls the encryption and decryption module, uses the session data to decrypt the data to obtain plaintext, and returns it to the receiver's target terminal PC. The encryption and decryption operations of the communication process are implemented through security hardware, providing a more secure and efficient secure communication function.

[0067] Furthermore, in this embodiment, a storage module may be provided. As described in the first embodiment, the storage module is accessed under the working system. The storage module may be configured in the secure communication portable device (similar to a storage box, etc.), or may be connected to the main control module through hardware, or may be remotely configured through a network and may be remotely accessed. The main control module may be used to store data or ciphertext in the storage module, or to read data or ciphertext from the storage module. As described above, when the secure communication portable device is connected to the target terminal so that the working system is running, the system partition and persistent data partition (which is connected to or is the storage module) of the secure communication portable device may be automatically mounted to store data in the persistent data partition.

[0068] A portable secure communication system provided in this embodiment uses the portable secure communication device in Example 1 to achieve communication between multiple target terminals or other communication equipment. The portable secure communication device integrates multiple working systems and can be started and run on any terminal anytime and anywhere. It uses the encryption and decryption functions of secure hardware and the keys are stored inside the secure hardware, which can achieve higher security protection than existing software encryption solutions. During the communication process, the random number generation and encryption and decryption capabilities provided by the built-in secure hardware can also be called, breaking through the performance bottleneck of software encryption's dependence on the system, greatly reducing the delay of encryption and decryption operations, processing large amounts of data with high throughput, and performing encryption and decryption operations without reducing system performance, thereby improving the efficiency of secure communications and overall performance.

[0069] It should be noted that the embodiments of the present invention have better practicability and do not impose any form of limitation on the present invention. Any technician familiar with the field may use the technical content disclosed above to change or modify it into an equivalent effective embodiment. However, any modification or equivalent changes and modifications made to the above embodiments based on the technical essence of the present invention without departing from the content of the technical solution of the present invention are still within the scope of the technical solution of the present invention.

Claims

1. A portable secure communication device, characterized in that: Setting a communication interface for connecting to a target terminal so that a preset working system can be run on the target terminal after connecting to the target terminal; Establishing communication with other communication devices through the target terminal; Autonomous data encryption and decryption are performed within the working system using built-in security hardware to transmit encrypted text between the target terminal and other communication devices.

2. The portable secure communication device according to claim 1, characterized in that: include: A main control module, used to receive or issue instructions to control the operation of the portable safety communication device; An encryption and decryption module, used to encrypt or decrypt data; A key module, used for randomly generating, receiving or storing keys; The communication interface module is connected to the communication interface to send or receive data and instructions.

3. The portable secure communication device according to claim 2, characterized in that: Also includes: The key module is configured by the security hardware built into the secure communication portable device.

4. The portable secure communication device according to claim 3, characterized in that: The encryption and decryption module implements data encryption and decryption operations through the built-in security hardware of the secure portable device.

5. The portable secure communication device according to claim 1, characterized in that: The secure communication portable device performs encryption and decryption of data in kernel mode.

6. A portable secure communication system, characterized in that: include: At least one target terminal and one other communication device, the target terminal being connected to the portable secure communication device according to any one of claims 1 to 4; Running the working system of the portable device for secure communication on the target terminal; A secure communication connection is established between the target terminal and other communication devices through protocol exchange. The secure communication portable device uses built-in security hardware to perform autonomous data encryption and decryption, and transmits ciphertext between the target terminal and other communication devices.

7. The portable secure communication system according to claim 6, characterized in that: The other communication devices support standard communication protocols; Or, the other communication equipment is connected to the secure communication portable device.

8. The portable secure communication system according to claim 6, characterized in that: Under the working system, the master control module controls the key module to generate a key, and sends the key to the other communication device through the target terminal for encryption or decryption of data; Or, receiving a key sent by other communication devices and storing it in the key module for use in encrypting or decrypting data.

9. The portable secure communication system according to claim 6, characterized in that: Under the working system, the encryption and decryption module is used to encrypt the data based on the key, and the ciphertext is returned to the main control module so that the ciphertext can be sent to other communication devices through the target terminal; And, receiving ciphertext sent by other communication devices through the target terminal, using the encryption and decryption module to decrypt the received ciphertext, and returning it to the main control module.

10. The portable secure communication system according to claim 6, characterized in that: Also includes: accessing a storage module under the working system; The data or ciphertext is stored in the storage module or read from the storage module through the main control module.

Images