A secure booting method for an embedded chip, characterized by comprising: when a boot program for the embedded chip is run, acquiring (S201) data of an application program, wherein the data of the application program comprises: signature information, public key information, parameter information of the application program, encrypted data, and a first digital check code; wherein the application program is run on the embedded chip, the signature information is obtained by computing the public key information, the parameter information of the application program, the encrypted data and the first digital check code by using a first algorithm, and the first digital check code is a Hash-based Message Authentication Code corresponding to the public key information, the parameter information of the application program and the encrypted data, processing, by using the first algorithm corresponding to the signature information, the public key information, the parameter information of the application program, the encrypted data, and the first digital check code to obtain a signature check code; performing signature check by comparing the signature check code and the signature information; if obtained signature check code is as same as the signature information, processing, by using a second algorithm corresponding to the first digital check code, the public key information, the parameter information of the application program, and the encrypted data to obtain an integrity check code; performing integrity check by comparing the integrity check code and the first digital check code; and if obtained integrity check code is as same as the first digital check code, decrypting, by using a third algorithm corresponding to a private key of the application program, the encrypted data according to the private key of the application program, the public key information and the parameter information of the application program. when a boot program for the embedded chip is run, acquiring (S201) data of an application program, wherein the data of the application program comprises: signature information, public key information, parameter information of the application program, encrypted data, and a first digital check code; wherein the application program is run on the embedded chip, the signature information is obtained by computing the public key information, the parameter information of the application program, the encrypted data and the first digital check code by using a first algorithm, and the first digital check code is a Hash-based Message Authentication Code corresponding to the public key information, the parameter information of the application program and the encrypted data, processing, by using the first algorithm corresponding to the signature information, the public key information, the parameter information of the application program, the encrypted data, and the first digital check code to obtain a signature check code; performing signature check by comparing the signature check code and the signature information; if obtained signature check code is as same as the signature information, processing, by using a second algorithm corresponding to the first digital check code, the public key information, the parameter information of the application program, and the encrypted data to obtain an integrity check code; performing integrity check by comparing the integrity check code and the first digital check code; and if obtained integrity check code is as same as the first digital check code, decrypting, by using a third algorithm corresponding to a private key of the application program, the encrypted data according to the private key of the application program, the public key information and the parameter information of the application program. <EOS>