A device for security information interaction, comprising: an interface circuit , configured to connect the device for security information interaction to an internet terminal; an information input unit , configured to allow user to input security information; a secure encryption/decryption unit , configured to store and process the security information; an information reader , configured to read information data from an external information carrier; wherein the secure encryption/decryption unit processes the security information in connection with the information data, and completes a business function on the secure channel through the interaction with an security information processing server, an initial register module , configured to complete the initial registration in connection with the user's personal information, a digital certificate and the external information carrier when the device for security information interaction is first used; a secure channel establishing module , configured to establish an end-to-end secure channel on the internet between the device for security information interaction and the security information processing server based on a handshake protocol; a data encryption/decryption module , configured to complete the encryption/decryption transmission of the application data based on a record layer protocol, characterized in that when the device for security information interaction is used, the user is required to input a device password, and then when the business interaction is performed, the user is required to input an authentication password of the external information carrier. an interface circuit , configured to connect the device for security information interaction to an internet terminal; an information input unit , configured to allow user to input security information; a secure encryption/decryption unit , configured to store and process the security information; an information reader , configured to read information data from an external information carrier; wherein the secure encryption/decryption unit processes the security information in connection with the information data, and completes a business function on the secure channel through the interaction with an security information processing server, an initial register module , configured to complete the initial registration in connection with the user's personal information, a digital certificate and the external information carrier when the device for security information interaction is first used; a secure channel establishing module , configured to establish an end-to-end secure channel on the internet between the device for security information interaction and the security information processing server based on a handshake protocol; a data encryption/decryption module , configured to complete the encryption/decryption transmission of the application data based on a record layer protocol, characterized in that when the device for security information interaction is used, the user is required to input a device password, and then when the business interaction is performed, the user is required to input an authentication password of the external information carrier. <EOS>