Smart card with domain-trust evaluation and domain policy management functions

A system comprising:

• a plurality of domains residing on one or more devices, wherein the plurality of domains are supported by at least one platform, each domain comprising a configuration of computing resources executing on the at least one platform and each domain configured to perform functions for an owner of the domain that may be located locally or remotely from the domain, wherein each domain may have a different owner, and wherein each owner may specify policies for operation of its domain as well as for operation of its domain in relation to the platform on which the domain resides and other domains;
• a card issuer security domain of a global platform (GP) compliant card being one of the plurality of domains, wherein the card issuer security domain is configured to determine a level of trust between an external stakeholder and the card issuer security domain;
• and
• a system-wide domain manager being resident on another one of the plurality of domains, wherein the domain on which the system-wide domain manager resides is subsidiary to the card issuer security domain, the system-wide domain manager being configured to enforce the policies on one or more subsidiary domains of the plurality of domains based on a privilege level received from the card issuer security domain, and wherein the privilege level is based on the level of trust between the external stakeholder and the card issuer security domain.