A device for security information interaction, comprising: an interface circuit, configured to connect the device for security information interaction to an internet terminal; an information input unit, configured to allow user to input security information; a secure encryption/decryption unit, configured to store and process the security information; an information reader, configured to read information data from an external information carrier; wherein the secure encryption/decryption unit processes the security information in connection with the information data, and completes a business function on the secure channel through the interaction with an security information processing server, an initial register module, configured to complete the initial registration in connection with the user's personal information, a digital certificate and the external information carrier when the device for security information interaction is first used; a secure channel establishing module, configured to establish an end-to-end secure channel on the internet between the device for security information interaction and the security information processing server based on a handshake protocol; a data encryption/decryption module, configured to complete the encryption/decryption transmission of the application data based on a record layer protocol, characterized in that when the device for security information interaction is used, the user is required to input a device password, and then when the business interaction is performed, the user is required to input an authentication password of the external information carrier. an interface circuit, configured to connect the device for security information interaction to an internet terminal; an information input unit, configured to allow user to input security information; a secure encryption/decryption unit, configured to store and process the security information; an information reader, configured to read information data from an external information carrier; wherein the secure encryption/decryption unit processes the security information in connection with the information data, and completes a business function on the secure channel through the interaction with an security information processing server, an initial register module, configured to complete the initial registration in connection with the user's personal information, a digital certificate and the external information carrier when the device for security information interaction is first used; a secure channel establishing module, configured to establish an end-to-end secure channel on the internet between the device for security information interaction and the security information processing server based on a handshake protocol; a data encryption/decryption module, configured to complete the encryption/decryption transmission of the application data based on a record layer protocol, characterized in that when the device for security information interaction is used, the user is required to input a device password, and then when the business interaction is performed, the user is required to input an authentication password of the external information carrier.