A method of initiating a secure processing module (SXHSM) for use over a computer network to allow the running of arbitrary client tasks on demand in a manner which secures sensitive data, code and other information, comprising the steps of: providing said secure processing module (SXHSM) having a first processor, a memory (MEM,ROMEM), and a cryptography module (CRYPTO) interconnected inside an anti-tamper enclosure, wherein said memory (MEM,ROMEM) includes instructions that configure the processor to selectively load and run a plurality of logical layers so as to enable the secure processing module (SXHSM) to run at least one application software program; connecting said secure processing module (SXHSM) to the computer network, thereby enabling the secure processing module (SXHSM) to communicate electrical signals over the computer network; the secure processing module (SXHSM) receiving a first communication, and in response thereto storing a first ownership token, which first ownership token is configured to be used by a first party to assert ownership of the secure processing module (SXHSM) by proving knowledge of the first ownership token, said assertion taking place using a first ownership credential; the first party providing, via a secure communication channel, said first ownership credential to a second party; the secure processing module (SXHSM) receiving a second communication from said second party, comprising a request and said first ownership credential; the secure processing module (SXHSM) authenticating said request by validating the first ownership credential against the first ownership token; once the first ownership credential has been validated against the first ownership token, the secure processing module (SXHSM) generating a second ownership token, which second ownership token is stored on the secure processing module (SXHSM), configured to replace said first ownership token and to be used instead of the first ownership token to assert ownership of said secure processing module (SXHSM) using a second ownership credential. providing said secure processing module (SXHSM) having a first processor, a memory (MEM,ROMEM), and a cryptography module (CRYPTO) interconnected inside an anti-tamper enclosure, wherein said memory (MEM,ROMEM) includes instructions that configure the processor to selectively load and run a plurality of logical layers so as to enable the secure processing module (SXHSM) to run at least one application software program; connecting said secure processing module (SXHSM) to the computer network, thereby enabling the secure processing module (SXHSM) to communicate electrical signals over the computer network; the secure processing module (SXHSM) receiving a first communication, and in response thereto storing a first ownership token, which first ownership token is configured to be used by a first party to assert ownership of the secure processing module (SXHSM) by proving knowledge of the first ownership token, said assertion taking place using a first ownership credential; the first party providing, via a secure communication channel, said first ownership credential to a second party; the secure processing module (SXHSM) receiving a second communication from said second party, comprising a request and said first ownership credential; the secure processing module (SXHSM) authenticating said request by validating the first ownership credential against the first ownership token; once the first ownership credential has been validated against the first ownership token, the secure processing module (SXHSM) generating a second ownership token, which second ownership token is stored on the secure processing module (SXHSM), configured to replace said first ownership token and to be used instead of the first ownership token to assert ownership of said secure processing module (SXHSM) using a second ownership credential.