A system for securing data on a computer network comprising: a plurality of users, each using a user computer (220a -220n) coupled to the computer network; a database remote from the plurality of user computers storing security device transaction data for the plurality of users; and a plurality of cryptographic modules in a server system, each of the plurality of cryptographic modules remote from the plurality of users, and each of the plurality of cryptographic modules comprising: a processor programmed to authenticate the plurality of remote users on the computer network for secure processing of a value bearing item, and for processing value for the value bearing item; a memory (303, 304) for storing security device transaction data for ensuring authenticity of a user, wherein the security device transaction data is related to the one of the plurality of users; a cipher engine for cryptographically protecting data; and an interface for communicating with the computer network, wherein each of the plurality of cryptographic modules is capable of authenticating any of the plurality of remote users, wherein each of the plurality of cryptographic modules is capable of processing a value bearing item printing request from any of the plurality of remote users, wherein each of the plurality of cryptographic modules is programmable to be available for use by any of the plurality of remote users; wherein any one of the plurality of cryptographic modules is loaded with security device transaction data from the database, wherein the security device transaction data related to a user comprises a user's secret key used to sign each successive communication with a respective user computer (220a -220n), wherein during a communication with a respective cryptographic module, the user computer (220a -220n) sends a new challenge message to the respective cryptographic module, the respective cryptographic module responds by signing the new challenge with the user's secret key and sends a ciphertext of the signed challenge back to the user computer, along with its own challenge, wherein the user computer (220a -220n) compares the ciphertext of the signed challenge it originally sent to the respective cryptographic module, and also signs the message received from the respective cryptographic module, and wherein the user computer (220a -220n) trusts the respective cryptographic module for a current transaction if the signatures compare. a plurality of users, each using a user computer (220a -220n) coupled to the computer network; a database remote from the plurality of user computers storing security device transaction data for the plurality of users; and a plurality of cryptographic modules in a server system, each of the plurality of cryptographic modules remote from the plurality of users, and each of the plurality of cryptographic modules comprising: a processor programmed to authenticate the plurality of remote users on the computer network for secure processing of a value bearing item, and for processing value for the value bearing item; a memory (303, 304) for storing security device transaction data for ensuring authenticity of a user, wherein the security device transaction data is related to the one of the plurality of users; a cipher engine for cryptographically protecting data; and an interface for communicating with the computer network, a processor programmed to authenticate the plurality of remote users on the computer network for secure processing of a value bearing item, and for processing value for the value bearing item; a memory (303, 304) for storing security device transaction data for ensuring authenticity of a user, wherein the security device transaction data is related to the one of the plurality of users; a cipher engine for cryptographically protecting data; and an interface for communicating with the computer network, wherein each of the plurality of cryptographic modules is capable of authenticating any of the plurality of remote users, wherein each of the plurality of cryptographic modules is capable of processing a value bearing item printing request from any of the plurality of remote users, wherein each of the plurality of cryptographic modules is programmable to be available for use by any of the plurality of remote users; wherein any one of the plurality of cryptographic modules is loaded with security device transaction data from the database, wherein the security device transaction data related to a user comprises a user's secret key used to sign each successive communication with a respective user computer (220a -220n), wherein during a communication with a respective cryptographic module, the user computer (220a -220n) sends a new challenge message to the respective cryptographic module, the respective cryptographic module responds by signing the new challenge with the user's secret key and sends a ciphertext of the signed challenge back to the user computer, along with its own challenge, wherein the user computer (220a -220n) compares the ciphertext of the signed challenge it originally sent to the respective cryptographic module, and also signs the message received from the respective cryptographic module, and wherein the user computer (220a -220n) trusts the respective cryptographic module for a current transaction if the signatures compare.