A method of chip security protection is proposed in this paper. According to the application characteristics of the chip, a security state machine is designed. The state machine is driven by the chip instructions. Only the security state meets the preset file access condition, the file access is permitted. At the same time, in order to isolate access permissions of different applications, the environment state machine and application state machine are defined. Through using these state machines together, the security of the chip is greatly enhanced.