Methods and systems for restricting data access based on properties of at least one of a process and a machine executing the process

A method of secure distribution, in a multi-tenant remote computing environment, of data, the method comprising:

• receiving a request for first verification data, from a first client computing device, by a management application on a first of a plurality of multi-tenant computing devices, the management application stored in a protected region of physical memory and executed by a processor in a trusted execution environment in the one of the plurality of multi-tenant computing devices;
• transmitting, by the management application, to the first client computing device, first verification data including an enumeration of process attributes for a type of multi-tenant computing device in the plurality of multi-tenant computing devices that the management application trusts;
• receiving, by the management application, from the first client computing device, data and information associated with the data;
• requesting second verification data, by the management application, from a transactional service executing on a second of the plurality of multi-tenant computing devices, the transactional service stored in an encrypted region of physical memory and executed by a processor in a trusted execution environment in the second of the plurality of multi-tenant computing devices;
• requesting, by the management application, from a third-party authentication provider, verification of at least one attribute of the transactional service based upon received second verification data;
• and
• transmitting, by the management application, to the transactional service, the received data and information associated with the data, responsive to verification by the third-party verification provider of the at least one attribute of the transactional service.