Patent ID: 8782423

Claim:
A system for emulating a physically attached trusted execution environment, comprising: a reception module capable of receiving trusted execution environment commands issued by a plurality of entities over a network, each trusted execution environment command being a command to operate on a security context that corresponds to an entity that issued the command; a security processor instance configured to perform a plurality of cryptographic and security processes on keys and protected data sets in response to the trusted execution environment commands received by the reception module, the security processor instance being tied to a particular entity and the particular entity's corresponding protected data sets, the security processor instance being prevented from processing execution environment commands from other entities; and an account management module configured to maintain a plurality of protected accounts, wherein a particular protected account of the plurality of accounts comprises a protected data set that corresponds to the particular entity assigned to the particular account and that includes a plurality of keys corresponding to the particular entity, the protected data set not being readable outside of the system, the security processor instance using at least some of the plurality of keys to perform cryptographic processes in response to one or more trusted execution environment commands received from the particular entity.