Patent ID: 8639949

Claim:
A secure computing device comprising: a secure cryptographic module, including an input, a key generator configured and arranged to generate a cryptographic key in dependence on received input, and an output configured and arranged to produce the cryptographic key; a processor; a storage including a virtual machine that is executable on the processor, and at least one program that is executable on the virtual machine; and a virtual machine manager including: a first sub-component configured and arranged to determine a session identifier associated with the virtual machine that is unique in time; a second sub-component configured and arranged to supply a representation of the session identifier to the secure cryptographic module and retrieve the cryptographic key, which is specific to the virtual machine, from the secure cryptographic module; and a third sub-component configured and arranged to, under control of the cryptographic key, decrypt at least a part of data input to the processor and encrypting at least part of data output from the processor when the processor executes the virtual machine.