A method of managing processing modules (SXHSM) available to remote clients over a computer network so as to provide confidentiality, non-repudiation, and authentication to the clients, comprising the steps of: providing at least one secure processing module (SXHSM) having a first processor, a memory (MEM,ROMEM), and a cryptography module (CRYPTO) interconnected inside an anti-tamper enclosure, wherein said memory (MEM,ROMEM) includes instructions that configure the processor to selectively load and run a plurality of logical layers so as to enable the secure processing module (SXHSM) to run at least one application software program; initiating said at least one secure processing module (SXHSM) by storing thereon a private cryptographic key corresponding to a public cryptographic key, as well as a signed public key certificate (SPKC) for the said public key, which signed public key certificate is signed by a vendor or producer of the secure processing module (SXHSM) in question; connecting said at least one secure processing module (SXHSM) to a computer network, thereby enabling the at least one secure processing module (SXHSM) to communicate electrical signals over the computer network; receiving, from a requesting party and through the computer network, an electronic request for allocation of secure processing modules (SXHSM); allocating at least one secure processing module (SXHSM), wherein the step of allocating comprises firstly, the at least one secure processing module (SXHSM) proving to said requesting party knowledge of the said private key; secondly, the requesting party verifying said public key certificate (SPKC) using a second certificate provided to the requesting party, which verification comprises identifying said vendor or producer as the signor of the public key certificate (SPKC); and, thirdly, reconfiguring each secure processing module (SXHSM) to be allocated and providing identifying information to the requesting party; wherein said step of allocating further comprises enabling the requesting party to transmit encrypted client software to any allocated secure processing module (SXHSM); and in that said step of allocating further comprises enabling the requesting party to interface with client application software programs, wherein said client application software programs embody the encrypted client software after being decrypted and run on the allocated secure processing module (SXHSM). providing at least one secure processing module (SXHSM) having a first processor, a memory (MEM,ROMEM), and a cryptography module (CRYPTO) interconnected inside an anti-tamper enclosure, wherein said memory (MEM,ROMEM) includes instructions that configure the processor to selectively load and run a plurality of logical layers so as to enable the secure processing module (SXHSM) to run at least one application software program; initiating said at least one secure processing module (SXHSM) by storing thereon a private cryptographic key corresponding to a public cryptographic key, as well as a signed public key certificate (SPKC) for the said public key, which signed public key certificate is signed by a vendor or producer of the secure processing module (SXHSM) in question; connecting said at least one secure processing module (SXHSM) to a computer network, thereby enabling the at least one secure processing module (SXHSM) to communicate electrical signals over the computer network; receiving, from a requesting party and through the computer network, an electronic request for allocation of secure processing modules (SXHSM); allocating at least one secure processing module (SXHSM), wherein the step of allocating comprises firstly, the at least one secure processing module (SXHSM) proving to said requesting party knowledge of the said private key; secondly, the requesting party verifying said public key certificate (SPKC) using a second certificate provided to the requesting party, which verification comprises identifying said vendor or producer as the signor of the public key certificate (SPKC); and, thirdly, reconfiguring each secure processing module (SXHSM) to be allocated and providing identifying information to the requesting party; wherein said step of allocating further comprises enabling the requesting party to transmit encrypted client software to any allocated secure processing module (SXHSM); and in that said step of allocating further comprises enabling the requesting party to interface with client application software programs, wherein said client application software programs embody the encrypted client software after being decrypted and run on the allocated secure processing module (SXHSM).