Secure digital communications

A method of performing a transaction between a first device and a second device, the first device having an established trusted communication relation with a first trusted device and the second device having an established trusted communication relation with a second trusted device,

• the first and the second trusted device each having an established trusted communication relation with a third trusted device,
• comprising the steps of
• a) the first device selecting, from a set of policies known to the devices, a policy for the transaction, wherein the selected policy comprises
• a first role definition comprising
• form and content of first input data, if any, to be provided by the first device, and
• form and content of first reference data, if any, pertaining to the first device and which is to be provided by the first trusted device,
• a second role definition comprising
• form and content of second input data, if any, to be provided by the second device, and
• form and content of second reference data, if any, pertaining to the second device and which is to be provided by the second trusted device,
• a referral method definition pertaining to at least one referral method to be used by the devices for processing respective input data and reference data,
• b) the second device receiving an invitation message comprising information indicating the selected policy,
• c) the second device accessing the selected policy to obtain the roles definition and the referral method definition,
• d) the second device processing the second input data according to the referral method to form a second representative value, and the first device processing the first input data according to the referral method to form a first representative value,
• e) the first trusted device receiving, from the first device, the first representative value, and the second trusted device receiving, from the second device, the second representative value,
• f) the first trusted device confirming the originality of the first device, processing the first reference information according to the referral method, validating that the first input data is according to the policy and including the first representative value to form a first referenced representative value,
• g) the second trusted device processing the second reference information according to the referral method, and including the second representative value to form a second referenced representative value,
• h) the third trusted device receiving the first referenced representative value from the first trusted device, and the second referenced representative value from the second trusted device,
• i) the third trusted device validating first and second referenced representative value against the policy,
• j) the first trusted device and the second trusted device receiving, from the third trusted device, a transaction receipt comprising the first and second referenced representative value,
• k) the first trusted device validating the second referenced representative value in the received transaction receipt against the second role definition, and the second trusted device validating the first referenced representative value in the received transaction receipt against the first role definition.