Cooperation method and system of hardware secure units, and application device

A cooperation system of a mobile hardware secure unit and a fixed hardware secure unit, comprising a mobile hardware secure unit, a fixed hardware secure unit, a communication pipe establishment unit and a binding unit and a processing unit, wherein

• the mobile hardware secure unit is configured to provide a user's identity;
• the fixed hardware secure unit is configured to provide a platform's identity;
• the communication pipe establishment unit is configured to establish a bidirectional communication pipe between the mobile and fixed hardware secure units by means of key negotiation or public key exchange;
• the processing unit is configured to perform cryptography processing on the user's identity provided by the mobile hardware secure unit and/or the platform's identity provided by the fixed hardware secure unit and
• the binding unit is configured to bind the mobile and fixed hardware secure units together through interaction of the user's identity and the platform's identity over the established bidirectional communication pipe, wherein the interaction comprises sending the user's identity provided by the mobile hardware secure unit to the fixed hardware secure unit which in turn recognizes and records the user's identity, and sending the platform's identity provided by the fixed hardware secure unit to the mobile hardware secure unit which in turn recognizes and records the platform's identity;
• wherein each of the mobile and fixed hardware secure units registers with a server, which confirms the binding relationship between the mobile and fixed hardware secure units, and wherein while sending a service request to the server, the mobile and fixed hardware secure units each sign under the binding relationship to present the platform's identity and the user's identity at the same time.

A computer device comprising a fixed hardware secure unit and a processing unit, the fixed hardware secure unit is loaded with a platform certificate for providing a platform's identity, wherein:

• a bidirectional communication pipe is established between the fixed hardware secure unit and a mobile hardware secure unit to provide a user's identity by means of key negotiation or public key exchange;
• the processing unit is configured to perform cryptography processing on the user's identity provided by the mobile hardware secure unit and/or the platform's identity provided by the fixed hardware secure unit;
• and
• the mobile and fixed hardware secure units are bound together through interaction of the user's identity and the platform's identity over the established bidirectional communication pipe, wherein the interaction comprises sending the user's identity provided by the mobile hardware secure unit to the fixed hardware secure unit which in turn recognizes and records the user's identity, and sending the platform's identity provided by the fixed hardware secure unit to the mobile hardware secure unit which in turn recognizes and records the platform's identity
• wherein each of the mobile and fixed hardware secure units registers with a server, which confirms the binding relationship between the mobile and fixed hardware secure units, and wherein while sending a service request to the server, the mobile and fixed hardware secure units each sign under the binding relationship to present the platform's identity and the user's identity at the same time.