A method comprising: deriving, by a computing device, a platform identity key from a root identity key; providing, by the computing device, the platform identity key and a device identifier that identifies the computing device to a service provider; creating, by the computing device, an initial application key (208) from the platform identity key; determining, by the computing device, that a component is loaded or executed, said component comprising an application, and in response to the determining: deriving, by the computing device, an application key (208, 208, 208, 208) for a sequence of application keys (208, 208, 208, 208) with a key derivation function, the application key (208, 208, 208, 208) being derived based at least in part on a preceding application key (208, 208, 208) that directly precedes the application key in the sequence of application keys (208, 208, 208, 208) and based at least in part on a hash of the component that is loaded or executed; and deleting, by the computing device, the preceding application key (208, 208, 208) upon deriving the application key (208, 208, 208, 208); utilizing, by the computing device, an application key (208) that remains in the sequence of application keys (208, 208, 208, 208) after the deletion to derive a first image identity operation key; requesting, by an application on the computing device, the service provider to verify an application state of the computing device, said request including the device identifier; retrieving, by the service provider, the platform identity key by referencing the device identifier; replicating, by the service provider, the first image identity operation key, said replicating based on creating the sequence of application keys (208, 208, 208, 208) from a log of applications that have been loaded by the computing device and from the platform identity key, and based on deriving a second image identity operation key from the sequence of applications keys (208, 208, 208, 208), wherein a first application identity operation key is derived from the first image identity operation key and is compared to a second application identity operation key derived from the second image operation key. deriving, by a computing device, a platform identity key from a root identity key; providing, by the computing device, the platform identity key and a device identifier that identifies the computing device to a service provider; creating, by the computing device, an initial application key (208) from the platform identity key; determining, by the computing device, that a component is loaded or executed, said component comprising an application, and in response to the determining: deriving, by the computing device, an application key (208, 208, 208, 208) for a sequence of application keys (208, 208, 208, 208) with a key derivation function, the application key (208, 208, 208, 208) being derived based at least in part on a preceding application key (208, 208, 208) that directly precedes the application key in the sequence of application keys (208, 208, 208, 208) and based at least in part on a hash of the component that is loaded or executed; and deleting, by the computing device, the preceding application key (208, 208, 208) upon deriving the application key (208, 208, 208, 208); deriving, by the computing device, an application key (208, 208, 208, 208) for a sequence of application keys (208, 208, 208, 208) with a key derivation function, the application key (208, 208, 208, 208) being derived based at least in part on a preceding application key (208, 208, 208) that directly precedes the application key in the sequence of application keys (208, 208, 208, 208) and based at least in part on a hash of the component that is loaded or executed; and deleting, by the computing device, the preceding application key (208, 208, 208) upon deriving the application key (208, 208, 208, 208); utilizing, by the computing device, an application key (208) that remains in the sequence of application keys (208, 208, 208, 208) after the deletion to derive a first image identity operation key; requesting, by an application on the computing device, the service provider to verify an application state of the computing device, said request including the device identifier; retrieving, by the service provider, the platform identity key by referencing the device identifier; replicating, by the service provider, the first image identity operation key, said replicating based on creating the sequence of application keys (208, 208, 208, 208) from a log of applications that have been loaded by the computing device and from the platform identity key, and based on deriving a second image identity operation key from the sequence of applications keys (208, 208, 208, 208), wherein a first application identity operation key is derived from the first image identity operation key and is compared to a second application identity operation key derived from the second image operation key.