Device and a method for performing a cryptographic algorithm

A device, comprising:

• an interface configured to receive a request for a first mechanism to be performed, the request comprising information identifying the first mechanism, and information identifying first data as corresponding to a program and second data as corresponding to an input;
• and
• a processor configured to:
• obtain the first data, comprising a representation of computer program code that embodies one or more cryptographic operations, and obtain the second data;
• perform the first mechanism, wherein performing the first mechanism comprises:
• performing a first determination, the first determination comprising:
• determining whether a first policy associated with the second data permits the second data to be used with the program represented in the first data, and
• determining whether a further policy associated with the computer program code permits the computer program code to be used with the second data;
• and
• if the first determination is successful, executing the program represented in the first data taking the second data as input;
• wherein the further policy is a third policy, and the processor is further configured to obtain third data, comprising a representation of output policy information;
• wherein the request further comprises information identifying the third data as corresponding to a second policy;
• and
• wherein performing the first mechanism further comprises associating the second policy with output data from the program.

A non-transitory computer readable storage medium comprising computer readable code configured to cause a computer to perform the following:

• obtaining first data, comprising a representation of computer program code that embodies a cryptographic algorithm;
• obtaining second data;
• receiving a request for a first mechanism to be performed, the request comprising information identifying the first mechanism, and information identifying the first data as corresponding to a program and the second data as corresponding to an input;
• performing the first mechanism, wherein performing the first mechanism comprises:
• performing a first determination, the first determination comprising:
• determining whether a first policy associated with the second data permits the second data to be used with the program represented in the first data, and
• determining whether a further policy associated with the computer program code permits the computer program code to be used with the second data;
• and
• if the first determination is successful, executing the program represented in the first data taking the second data as input;
• wherein the further policy is a third policy, and the non-transitory computer readable storage medium further comprises computer readable code configured to cause a computer to obtain third data, comprising a representation of output policy information;
• wherein the request further comprises information identifying the third data as corresponding to a second policy;
• and
• wherein performing the first mechanism further comprises associating the second policy with output data from the program.

A computer implemented method comprising:

• obtaining first data, comprising a representation of computer program code that embodies a cryptographic algorithm;
• obtaining second data;
• receiving a request for a first mechanism to be performed, the request comprising information identifying the first mechanism, and information identifying the first data as corresponding to a program and the second data as corresponding to an input;
• performing the first mechanism, wherein performing the first mechanism comprises:
• performing a first determination, the first determination comprising:
• determining whether a first policy associated with the second data permits the second data to be used with the program represented in the first data, and
• determining whether a further policy associated with the computer program code permits the computer program code to be used with the second data;
• and
• if the first determination is successful, executing the program represented in the first data taking the second data as input;
• wherein the computer implemented method further comprises obtaining fourth data;
• wherein the request further comprises information identifying the fourth data as corresponding to input data, and wherein the request further defines the role of the second data and the fourth data;
• and
• wherein performing the first determination further comprises determining whether a fifth policy associated with the fourth data permits the fourth data to be used with the program represented in the first data.

A device, comprising:

• an interface configured to receive a request for a first mechanism to be performed, the request comprising information identifying the first mechanism, and information identifying first data as corresponding to a program and second data as corresponding to an input;
• and
• a processor configured to:
• obtain the first data, comprising a representation of computer program code that embodies one or more cryptographic operations, and obtain the second data;
• perform the first mechanism, wherein performing the first mechanism comprises:
• performing a first determination, the first determination comprising:
• determining whether a first policy associated with the second data permits the second data to be used with the program represented in the first data, and
• determining whether a further policy associated with the computer program code permits the computer program code to be used with the second data;
• and
• if the first determination is successful, executing the program represented in the first data taking the second data as input;
• wherein the processor is further configured to obtain fourth data;
• wherein the request further comprises information identifying the fourth data as corresponding to input data, and wherein the request further defines the role of the second data and the fourth data;
• and
• wherein performing the first determination further comprises determining whether a fifth policy associated with the fourth data permits the fourth data to be used with the program represented in the first data.

A non-transitory computer readable storage medium comprising computer readable code configured to cause a computer to perform the following:

• obtaining first data, comprising a representation of computer program code that embodies a cryptographic algorithm;
• obtaining second data;
• receiving a request for a first mechanism to be performed, the request comprising information identifying the first mechanism, and information identifying the first data as corresponding to a program and the second data as corresponding to an input;
• performing the first mechanism, wherein performing the first mechanism comprises:
• performing a first determination, the first determination comprising:
• determining whether a first policy associated with the second data permits the second data to be used with the program represented in the first data, and
• determining whether a further policy associated with the computer program code permits the computer program code to be used with the second data;
• and
• if the first determination is successful, executing the program represented in the first data taking the second data as input;
• wherein the non-transitory computer readable storage medium further comprises computer readable code configured to cause a computer to obtain fourth data;
• wherein the request further comprises information identifying the fourth data as corresponding to input data, and wherein the request further defines the role of the second data and the fourth data;
• and
• wherein performing the first determination further comprises determining whether a fifth policy associated with the fourth data permits the fourth data to be used with the program represented in the first data.