In one embodiment, one kind for protecting data, non-fully realize on the computing device by trust server, it and include: at least to receive from users current sessions key, so as to current, it is being suitble to current sessions key to come encryption data and encryption for ciphertext data and current key, it decrypts communication source and uses the session key in ession for telecommunication in user, session key encryption is communicated at least one is sent to the users personal data generation in ession for telecommunication, store the personal data of the encryption, it abandons current sessions key and completes session, thus limit the personal data of the stored encryption of possible access rather than in ession for telecommunication. Also describe relevant device and method.