Patent ID: 8804701

Claim:
A method for providing confidential data by a computing platform, the method comprising: checking, by a trusted mediator operating on the computing platform, a local policy store for a policy for providing confidential data in conjunction with establishing a data connection to a data recipient, wherein the computing platform includes a first virtual machine hosting a user application and the local policy store, and a second virtual machine hosting the trusted mediator, wherein the local policy store is configured to store user policies constraining operation of the user application, including the policy for providing the confidential data in conjunction with establishing the data connection to the data recipient, and the trusted mediator is configured to mediate access to resources, including providing the confidential data including location data; based on a result of the checking, initiating, by the trusted mediator, the data connection with the data recipient, including requesting from a trusted source, confidential data for establishing the data connection; and receiving, by the trusted mediator, in response to the request for confidential data, a first cryptographically signed confidential data from the trusted source, and responsive thereto, providing a second cryptographically signed confidential data to the user application, the providing including modifying the second cryptographically signed confidential data based on the result of the checking for the policy.