Application certification for an international cryptography framework

A method of validating that an application rightfully executes a class of service as it was granted by an application domain authority, comprising the steps of:

• issuing an application certificate containing a valid class of services;
• and
• tightly binding said application to said application certificate to establish trust between said application and a target processor.

A method for processing unit validation in which an application that requests processing services is assured about the identity of said processing unit, comprising the steps of:

• challenging said processing unit;
• and
• issuing a puzzle to said processing unit that only said processing unit is able to resolve, wherein said processing unit's ability to solve said puzzle is proof of the identity of said processing unit.

An apparatus for certifying applications, comprising:

• an application domain authority for issuing at least one application certificate to at least one application that belongs to an application domain authority domain, said application certificate uniquely denoting any of said application, a target processor, and a valid class of services for said application;
• and
• a target processor for receiving said application certificate to determine whether said application has a right to access a requested function.

An apparatus for processing unit validation in which an application that requests processing services is assured about the identity of said processing unit, comprising:

• means for challenging said processing unit;
• and
• means for issuing a puzzle to said processing unit that only said processing unit is able to resolve, wherein said processing unit's ability to solve said puzzle is proof of the identity of said processing unit.