Trusted and secure techniques, systems and methods for item delivery and execution

A system including:

• a first apparatus including,
• user controls,
• a communications port,
• a processor,
• a memory storing:
• a first secure container containing a governed item, the first secure container governed item being at least in part encrypted;
• the first secure container having been received from a second apparatus;
• a first secure container rule at least in part governing an aspect of access to or use of said first secure container governed item, the first secure container rule, the first secure container rule having been received from a third apparatus different from said second apparatus;
• and
• hardware or software used for receiving and opening secure containers, said secure containers each including the capacity to contain a governed item, a secure container rule being associated with each of said secure containers;
• a protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said first apparatus, said protected processing environment including hardware or software used for applying said first secure container rule and a second secure container rule in combination to at least in part govern at least one aspect of access to or use of a governed item contained in a secure container;
• and
• hardware or software used for transmission of secure containers to other apparatuses or for the receipt of secure containers from other apparatuses.

A system including:

• a first apparatus including,
• user controls,
• a communications port,
• a processor,
• a memory storing:
• a first secure container containing a governed item, the first secure container governed item being at least in part encrypted;
• a first secure container rule at least in part governing an aspect of access to or use of said first secure container governed item;
• and
• a second secure container containing a digital certificate;
• hardware or software used for receiving and opening secure containers, said secure containers each including the capacity to contain a governed item, a secure container rule being associated with each of said secure containers;
• a protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said first apparatus, said protected processing environment including hardware or software used for applying said first secure container rule and a second secure container rule in combination to at least in part govern at least one aspect of access to or use of a governed item contained in a secure container;
• and
• hardware or software used for transmission of secure containers to other apparatuses or for the receipt of secure containers from other apparatuses.

A system including:

• a first apparatus including,
• user controls,
• a communications port,
• a processor,
• a memory storing,
• a first secure container containing a governed item, the first secure container governed item being at least in part encrypted;
• a first secure container rule at least in part governing an aspect of access to or use of said first secure container governed item;
• and
• a second secure container containing a digital signature, the second secure container being different from said first secure container;
• hardware or software used for receiving and opening secure containers, said secure containers each including the capacity to contain a governed item, a secure container rule being associated with each of said secure containers;
• a protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said first apparatus, said protected processing environment including hardware or software used for applying said first secure container rule and a second secure container rule in combination to at least in part govern at least one aspect of access to or use of a governed item contained in a secure container;
• and
• hardware or software used for transmission of secure containers to other apparatuses or for the receipt of secure containers from other apparatuses.

A system including:

• a first apparatus including,
• user controls,
• a communications port,
• a processor,
• a memory storing:
• a first secure container containing a governed item, the first secure econainer governed item being at least in part encrypted;
• a first secure container rule at least in part governing an aspect of access to or use of said first secure container governed item;
• and
• an electronic seal including receipt information;
• hardware or software used for receiving and opening secure containers, said secure containers each including the capacity to contain a governed item, a secure container rule being associated with each of said secure containers;
• a protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said first apparatus, said protected processing environment including hardware or software used for applying said first secure container rule and a second secure container rule in combination to at least in part govern at least one aspect of access to or use of a governed item contained in a secure container;
• and
• hardware or software used for transmission of secure containers to other apparatuses or for the receipt of secure containers from other apparatuses.

A system including:

• a first apparatus including,
• user controls,
• a communications port,
• a processor,
• a memory storing:
• a first secure container containing a governed item, the first secure container governed item being at least in part encrypted;
• a first secure container rule at least in part governing an aspect of access to or use of said first secure container governed item;
• and
• an electronic seal including usage information;
• hardware or software used for receiving and opening secure containers, said secure containers each including the capacity to contain a governed item, a secure container rule being associated with each of said secure containers;
• a protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said first apparatus, said protected processing environment including hardware or software used for applying said first rule and a second secure container rule in combination to at least in part govern at least one aspect of access to or use of a governed item contained in secure container;
• and
• hardware or software used for transmission of secure containers to other apparatuses or for the receipt of secure containers from other apparatuses.

A system including:

• a first apparatus including,
• user controls,
• a communications port,
• a processor,
• a memory storing:
• a first secure container containing a governed item, the first secure container governed item being at least in part encrypted;
• a first secure container rule at least in part governing an aspect of access to or use of said first secure container governed item;
• and
• an electronic seal including an image designed to allow for visual recognition of said seal;
• hardware or software used for receiving and opening secure containers, and secure containers each including the capacity to contain a governed item, a secure container rule being associated with each of said secure containers;
• a protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said firs apparatus, said protected processing environment including hardware or software used for applying said first rule and a second secure container rule in combination to at least in part govern at least one aspect of access to or use of a governed item contained in a secure container;
• and
• hardware or software used for transmission of secure containers to other apparatuses or for the receipt of secure containers from other apparatuses.

A system including:

• a first apparatus including,
• user controls,
• a communications port,
• a processor,
• a memory storing:
• a first secure container containing a governed item, the first secure container governed item being at least in part encrypted;
• a first secure container rule at least in part governing an aspect of access to or use of said first secure container governed item;
• and
• an electronic seal including encoded information;
• hardware or software used for receiving an opening secure containers, said secure containers each including the capacity to contain a governed item, a secure container rule being associated with each of said secure containers;
• a protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said first apparatus, said protected processing environment including hardware or software used for applying said first secure container rule and a second secure container rule in combination to at least in part govern at least one aspect of access to or use of a governed item contained in a secure container;
• and
• hardware or software used for transmission of secure containers to other apparatuses or for the receipt of secure containers from other apparatuses.

A system including:

• a first apparatus including,
• user controls,
• a communications port,
• a processor,
• a memory storing:
• a first secure container containing a governed item, the first secure container governed item being at least in part encrypted;
• a first secure container rule at least in part governing an aspect of access to or use of said first secure container governed item;
• and
• an electronic seal including (a) a representation of an aspect of said governed item, said representation including a hash of at least a portion of said governed item after normalization of said portion, and (b) a item value;
• hardware or software used for receiving and opening secure containers, said secure containers each including the capacity to contain a governed item, a secure container rule being associated with each of said secure containers;
• a protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said first apparatus, said protected processing environment including hardware or software used for applying said first secure container rule and a second secure container rule in combination to at least in part govern at least one aspect of access to or use of a governed item contained in a secure container;
• and
• hardware or software used for transmission of secure containers to other apparatuses or for the receipt of secure containers from other apparatuses.

A system including:

• a first apparatus including,
• user controls,
• a communications port,
• a processor,
• a memory storing:
• a first secure container containing a governed item, the first secure container governed item being at least in part encrypted;
• a first secure container rule at least in part governing an aspect of access to or use of said first secure container governed item;
• and
• an electronic seal including encrypted information;
• hardware or software used for receiving and opening secure containers, said secure containers each including the capacity to contain a governed item, a secure container rule being associated with each of said secure containers;
• a protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said first apparatus, said protected processing environment including hardware or software used for applying said first secure container rule and a second secure econatiner rule in combination to at least in part govern at least one aspect of access or to use of a governed item contained in a secure container;
• and
• hardware or software used for transmission of secure containers to other apparatuses or for the receipt of secure containers from other apparatuses.

A system including:

• a first apparatus including,
• user controls,
• a communications port,
• a processor,
• a memory storing:
• a first secure container containing a governed item, the first secure container governed item being at least in part encrypted;
• a first secure container rule at least in part governing an aspect of access to or use of said first secure container governed item;
• and
• an electronic seal including an error correction code derived from at least a portion of said first secure container governed item;
• hardware or software used for receiving and opening secure containers, said secure containers each including the capacity to contain a governed item, a secure container rule being associated with each of said secure containers;
• a protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said first apparatus, said protected processing environment including hardware or software used for applying said first secure container rule and a second secure container rule in combination to at least in part govern at least one aspect of access to or use of a governed item contained in a secure container;
• and
• hardware or software used for transmission of secure containers to other apparatuses or for the receipt of secure containers from other apparatuses.

A system including:

• a first apparatus including,
• user controls,
• a communications port,
• a processor,
• a memory storing:
• a first secure container containing a governed item, the first secure container governed item being at least in part encrypted;
• a first secure container rule at least in part governing an aspect of access to or use of said first secure container governed item;
• and
• an electronic seal stored in a secure container;
• hardware or software used for receiving and opening secure containers, said secure containers each including the capacity to contain a governed item, a secure container rule being associated with each of said secure containers;
• a protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said first apparatus, said protected processing environment including hardware or software used for applying said first secure container rule and a second secure container rule in combination to at least in part govern at least one aspect of access to or use of a governed item contained in a secure container;
• and
• hardware or software used for transmission of secure containers to other apparatuses or for the receipt of secure containers from other apparatuses.

A system including:

• a first apparatus including,
• user controls,
• a communications port,
• a processor,
• a memory storing:
• a first secure container containing a governed item, the first secure container governed item being at least in part encrypted;
• a first secure container rule at least in part governing an aspect of access to or use of said first secure container governed item;
• and
• an electronic fingerprint stored in a second secure container, different from said first secure container;
• hardware or software used for receiving and opening secure containers, said secure containers each including the capacity to contain a governed item, a secure container rule being associated with each of said secure containers;
• a protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said first apparatus, said protected processing environment including hardware or software used for applying said first secure container rule and a second secure container rule in combination to at least in part govern at least one aspect of access to or use of a governed item contained in a secure container;
• and
• hardware or software used for transmission of secure containers to other apparatuses or for the receipt of secure containers from other apparatuses.

A system including:

• a first apparatus including,
• user controls,
• a communications port,
• a processor,
• a memory storing:
• a first secure container containing a governed item, the first secure container governed item being at least in part encrypted, the first secure container governed item including steganographically encoded information including a first portion encoded using a first steganographic encoding technique and a second portion encoded using a second steganographic encoding technique;
• a first secure container rule at least in part governing an aspect of access to or use of said first secure container governed item;
• hardware or software used for receiving and opening secure containers, said secure containers each including the capacity to contain a governed item, a secure container rule being associated with each of said secure containers;
• a protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said first apparatus, said protected processing environment including hardware or software used for applying said first secure container rule and a second secure container rule in combination to at least in part govern at least one aspect of access to or use of a governed item contained in a secure container;
• and
• hardware or software used for transmission of secure containers to other apparatuses or for the receipt of secure containers from other apparatuses.

A system including;

• a first apparatus including;
• user controls,
• a communications port,
• a processor,
• a memory containing a first rule,
• hardware or software used for receiving and opening secure containers, said secure containers each including the capacity to contain a governed item, a secure container rule being associated with each of said secure containers;
• a protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said first apparatus, said protected processing environment including hardware or software used for applying said first rule and a secure container rule in combination to at least in part govern at least one aspect of access to or use of a governed item;
• and
• hardware or software used for transmission of secure containers to other apparatuses or for the receipt of secure containers from other apparatuses;
• and
• a second apparatus including:
• user controls,
• a communications port,
• a processor,
• a memory containing a second rule,
• hardware or software used for receiving and opening secure containers, said secure containers each including the capacity to contain a governed item, a secure container rule being associated with each of said secure containers;
• a protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said apparatus, said protected processing environment including hardware or software used for applying said second rule and a secure container rule in combination to at least in part govern at least one aspect of access to or use of a governed item;
• hardware or software used for transmission of secure containers to other apparatuses or for the receipt of secure containers from other apparatuses;
• and
• an electronic intermediary, said intermediary including a user rights authority clearinghouse.

A method of securely delivery an item, including the following steps:

• (a) initializing a first apparatus, said first apparatus including a protected processing environment, said protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said first apparatus, said initialization including:
• registering a first rule associated with said first apparatus or a user of said first apparatus;
• establishing the identity of a user of said first apparatus;
• and
• at least partially integrating a rule with a user application, including altering the user interface of said user application;
• (b) specifying information to be used in said delivery, said information including:
• an address of a recipient of said item,
• delivery information,
• receipt information,
• authentication information,
• a rule to at least in part govern at least one access to or use of said item once delivered;
• (c) at least in part using said protected processing environment of said first apparatus, storing said item in a secure electronic container, including encrypting at least a portion of said item, and associating a second rule with said secure electronic container, said step of storing and associating being governed at least in part by said first rule;
• and
• (d) transmitting said secure electronic container to a second apparatus.

A method of securely delivering an item, including the following steps:

• (a) initializing a first apparatus, said first apparatus including a protected processing environment, said protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said first apparatus, said initializing including:
• registering a first rule associated with said first apparatus or a user of said first apparatus;
• and
• establishing the identity of a user of said first apparatus;
• (b) specifying information to be used in said delivery, said information including:
• an address of a recipient of said item,
• delivery information,
• receipt information,
• authentication information, and
• a rule to at least in part govern at least one access to or use of said item once delivered,
• (c) at least in part using said protected processing environment of said first apparatus, storing said item in a secure electronic container, including encrypting at least a porting of said item, and associating a second rule with said secure electronic container, said step of storing and associating being governed at least in part by said first rule;
• (d) transmitting said secure electronic container to a second apparatus;
• (e) receiving said secure electronic container at the second apparatus;
• (f) said second apparatus generating a receipt following reception of said secure container;
• and
• (g) using said second rule to at least in part govern at least one aspect of access to or use of said item at said second apparatus.

A method of securely delivering an item, including the following steps:

• (a) initializing a first apparatus, said first apparatus including a protected processing environment, said protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said first apparatus, said initialization including:
• registering a first rule associated with said first apparatus or a user of said first apparatus;
• and
• establishing the identity of a user of said first apparatus;
• (b) specifying information to be used in said delivery and providing a key associated with an intended recipient, said information including:
• an address of a recipient of said item,
• information at least in part identifying at least one intended recipient,
• delivery information,
• receipt information,
• authentication information, and
• a rule to at least in part govern at least one access to or use of said item once delivered;
• (c) at least in part using said protected processing environment of said first apparatus, storing said item in a secure electronic container, including encrypting at least a portion of said item, and associating a second rule with said secure electronic container, said step of storing and associating being governed at least in part by said first rule;
• (d) transmitting said secure electronic container to a second apparatus;
• (e) receiving said secure electronic container at the second apparatus;
• and
• (f) using said second rule to at least in part govern at least one aspect of access to or use of said item at said second apparatus.

A method of securely delivering an item, including the following steps:

• (a) initializing a first apparatus, said first apparatus including a protected processing environment, said protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said first apparatus, said initialization including:
• registering a first rule associated with said first apparatus or a user of said first apparatus;
• and
• establishing the identity of a suer of said first apparatus;
• (b) specifying information to be used in said delivery, said information including
• an address of a recipient of said item,
• delivery information,
• receipt information,
• authentication information, and
• a rule to at least in part govern at least one access to or use of said item once delivered;
• (c) at least in part using said protected processing environment of said first apparatus, storing said item in a secure electronic container, including encrypting at least a portion of said item, and associating a second rule with said secure electronic container, said step of storing and associating being governed at least in part by said first rule;
• (d) transmitting said secure electonic container to a second apparatus;
• (e) receiving said secure electronic container at the second apparatus;
• (f) using said second rule to at least in part govern at least on aspect of access to or use of said item at said second apparatus;
• and
• (g) determining the identity of a party required to make a payment relating to said delivery.

A method of securely delivering an item, including the following steps:

• (a) initializing a first apparatus, said first apparatus including a protected processing environment, said protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said first apparatus, said initialization including:
• registering a first rule associated with said first apparatus or a user of said first apparatus;
• and
• establishing the identity of a user of said first apparatus;
• (b) specifying information to be used in said delivery, said information including
• an address of a receipt of said item,
• delivery information,
• receipt information,
• authentication information, and
• a rule to at least in part govern at least one access to or use of said item once delivered;
• (c) at least in part using said protected processing environment of said first apparatus, storing said item in secure electronic container, including encrypting at least a portion of said item, and associating a second rule with said secure electronic container, said step of storing and associating being governed at least in part by said first rule;
• (d) said first apparatus receiving a rule, said first apparatus using said received rule to govern an aspect of said method;
• (e) following said receipt in said step (d), transmitting said secure electronic container to a second apparatus;
• (f) receiving said secure electronic container at the second apparatus;
• and
• (g) using said second rule to at least in part govern an aspect of access to or use of said item at said second apparatus.

A method of securely delivering an item, including the following steps:

• (a) initializing a first apparatus, said first apparatus including a protected processing environment, said protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said first apparatus, said initialization including:
• registering a first rule associated with said first apparatus or a user of said first apparatus;
• and
• establishing the identity of a user of said first apparatus;
• (b) specifying information to be used in said delivery, including obtaining an address of a recipient of said item information from a third apparatus, said information including:
• said recipient address,
• delivery information,
• receipt information,
• authentication information, and
• a rule to at least in part govern at least one access to or use of said item once delivered;
• (c) at least in part using said protected processing environment of said first apparatus, storing said item in a secure electronic container, including encrypting at least a portion of said item, and associating a second rule with said secure electronic container, said step of storing and associating being governed at least in part under control of said first rule;
• (d) transmitting said secure electronic container to a second apparatus;
• (e) receiving said secure electronic container at the second apparatus;
• and
• (f) using at least said second rule to at least in part govern at least one aspect of access to or use of said item at said second apparatus.

A method of securely delivering an item, including the following steps:

• steganographically encoding information in an electronic seal, using a first steganographic technique to encode a first portion of said encoded information, and using a second steganographic technique to encode a second portion of said encoded information;
• associating said electronic seal with said item;
• incorporating said item into a first secure electronic container, said item being at least in part encrypted while in said container, said incorporation occurring in an apparatus containing a first protected processing environment, said protected processing environment at least in part protecting information contained in said protected processing enviormnment from tampering by a user of said apparatus;
• in said protected processing environment, associating a first rule with said first secure electronic container, said first rule at least in part governing at least one aspect of access to or use of said item;
• authenticating an intended recipient of said item;
• transmitting said first secure electronic container and said first rule to said intended recipient;
• and
• using a second protected processing environment, providing said intended recipient access to at least a portion of said item, said access being governed at least in part by said rule and by a second rule present at said intended recipient's site.

A method of securely delivering an item, including the following steps:

• incorporating said item into a first secure electronic container, said item being at least in part encrypted while in said container, said incorporation occurring in an apparatus containing a first protected processing environment, said protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said apparatus;
• in said protected processing environment, associating a first rule with said first secure electronic container, said first rule at least in part governing at least one aspect of access to or use of said item;
• steganographically encoding information in an electronic seal, at least a portion of said steganographically encoded information being encrypted;
• associating said electronic seal with said item;
• authenticating an intended recipient of said item;
• transmitting said first secure electronic container and said first rule to said intended recipient;
• and
• using a second protected processing environment, providing said intended recipient access to at least a portion of said item, said access being governed at least in part by said first rule and by a second rule present at said intended recipient's site.

A method of securely delivering an item, including the following steps:

• creating a hash value representing an aspect of said item;
• encrypting said hash value;
• associating said hash value with an electronic seal;
• associating said electronic seal with said item;
• incorporating said item into a first secure electronic container, said item being at least in part encrypted while in said container, said incorporation occurring in an apparatus containing a first protected processing environment, said protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said apparatus;
• in said protected processing environment, associating a first rule with said first secure electronic container, said first rule at least in part governing at least one aspect of access to or use of said item;
• authenticating an intended recipient of said item;
• transmitting said first secure electronic container and said first rule to said intended recipient;
• and
• using a second protected processing environment, providing said intended recipient access to at least a portion of said item, said access being governed at least in part by said first rule and by a second rule present at said intended recipient's site.

A method of securely delivering an item, including the following steps:

• associating a digital signature with said item, said digital signature having associated a rule, said digital signature rule requiring connection to a remote server prior to a use of said digital signature;
• incorporating said item into a first secure electronic container, said item being at least in part encrypted while in said container, said incorporation occurring in an apparatus containing a first protected processing environment, said protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said apparatus;
• in said protected processing environment, associating a first rule with said first secure electronic container, said first rule at least in part governing at least one aspect of access to or use of said item;
• authenticating an intended recipient of said item;
• transmitting said first secure electronic container and said first rule to said intended recipient;
• and
• using a second protected processing environment, providing said intended recipient access to at least a portion of said item, said access being governed at least in part by said first rule and by a second rule present at said intended recipient's site.

A method of securely delivering an item, including the following steps:

• receiving a digital signature from a remote site, said remote site including a secure director;
• embedding said digital signature in said item,
• incorporating said item into a first secure electronic container, said item being at least in part encrypted while in said container, said incorporation occurring in an apparatus containing a first protected processing environment, said protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said apparatus;
• in said protected processing environment, associating a first rule with said first secure electronic container, said first rule at least in part governing at least one aspect of access to or use of said item;
• authenticating an intended recipient of said item;
• transmitting said first secure electronic container and said first rule to said intended recipient;
• and
• using a second protected processing environment, providing said intended recipient access to at least a portion of said item, said access being governed at least in part by said first rule and by a second rule present at said intended recipient's site.

A method of securely delivering an item, including the following steps:

• receiving a digital signature in a secure electronic container;
• embedding said digital signature in said item;
• incorporating said item into a secure electronic container, said item being at least in part encrypted while in said container, said incorporation occurring in an apparatus containing a first protected processing environment, said protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said apparatus;
• in said protected processing environment, associating a first rule with said secure electronic container, said first rule at least in part governing at least one aspect of access to or use of said item;
• authenticating an intended recipient of said item;
• transmitting said secure electronic container and said first rule to said intended recipient;
• and
• using a second protected processing environment, providing said intended recipient access to at least a portion of said item, said access being governed at least in part by said first rule and by a second rule present at said intended recipient's site.

A method of securely delivering an item, including the following steps:

• associating a digital signature with said item, said digital signature including a digital image representation of a handwritten signature of a user associated with said digital signature;
• incorporating said item into a first secure electronic container, said item being at least in part encrypted while in said container, said incorporation occurring in an apparatus containing a first protected processing environment, said protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said apparatus;
• in said protected processing environment, associating a first rule with said first secure electronic container, said first rule at least in part governing at least one aspect of access to or use of said item;
• authenticating an intended recipient of said item;
• transmitting said first secure electronic container and said first rule to said intended recipient;
• and
• using a second protected processing environment, providing said intended recipient access to at least a portion of said item, said access being governed at least in part by said first rule and by a second rule present at said intended recipient's site.

A method of securely delivering an item, including the following steps:

• performing an authentication step;
• associating a digital signature with said item;
• incorporating said item into a first secure electronic container, said item being at least in part encrypted while in said container, said incorporation occurring in an apparatus containing a first protected processing environment, said protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said apparatus;
• in said protected processing environment, associating a first rule with said first secure electronic container, said first rule at least in part governing at least one aspect of access to or use of said item;
• authenticating an intended recipient of said item;
• transmitting said first secure electronic container and said first rule to said intended recipient;
• and
• using a second protected processing environment, providing said intended recipient access to at least a portion of said item, said access being governed at least in part by said first rule and by a second rule present at said intended recipient's site.

A method of securely delivering an item, including the following step:

• associating an electronic fingerprint with said item, said electronic fingerprint containing a cryptographic key;
• incorporating said item into a first secure electronic container, said item being at least in part encrypted while in said container, said incorporation occurring in an apparatus containing a first protected processing environment, said protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said apparatus;
• in said protected processing environment, associating a first rule with said first secure electronic container, said first rule at least in part governing at least one aspect of access to or use of said item;
• authenticating an intended recipient of said item;
• transmitting said first secure electronic container and said first rule to said intended recipient;
• and
• using a second protected processing environment, providing said intended recipient access to at least a portion of said item, said access being governed at least in part by said first rule and by a second rule present at said intended recipient's site.

A method of securely delivering an item, including the following steps:

• associating an electronic fingerprint with said item, said electronic fingerprint container the date of transmission of said item;
• incorporating said item into a first secure electronic container, said item being at least in part encrypted while in said container, said incorporation occurring in an apparatus containing a first protected processing environment, said protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said apparatus;
• in said first protected processing environment, associating a first rule with said first secure electronic container, said first rule at least in part governing at least one aspect of access to or use of said item;
• authenticating an intended recipient of said item;
• transmitting said first secure electronic container and said first rule to said intended recipient;
• and
• using a second protected processing environment, providing said intended recipient access to at least a portion of said item, said access being governed at least in part by said first rule and by a second rule present at said intended recipient's site.

A method of securely delivering an item, including the following steps:

• incorporating said item into a first secure electronic container;
• associated a first rule with said first secure electronic container, said first rule at least in part governing at least one aspect of access to or use of said item;
• providing an address for at least one intended recipient of said item;
• transmitting said first secure electronic container and said first rule to an apparatus associated with said intended recipient, said apparatus already storing a second rule, said apparatus including a protected processing environment at least in part protecting information contained in said protected processing environment from tampering by a user of said apparatus;
• providing said intended recipient access to at least a portion of said item, said access being governed at least in part by said first rule, said governance at least in part using said protected processing environment;
• and
• generating a first digital receipt documenting at least one aspect of said transmission, said generation being governed at least in part by said first rule and by said second rule, said generation occurring at least in part in said protected processing environment.

A method of providing trusted intermediary services including the following steps:

• providing a secure communications node on a first network, said secure communications node being connected to said first network and to a second network;
• receiving a first item from a node on said first network;
• incorporating said first item into a first secure digital container;
• associated at least one rule with said first secure digital container, said first rule at least in part governing at least one aspect of access to or use of said first item;
• associating authentication information with said first item,
• transmitting said first secure digital container to an intended recipient of said first item, said intended recipient being located at a node on said second network,
• receiving a second secure digital container and a second rule from said second network node,
• removing a second item from said second secure digital container, said removal at least in part occurring under the control of said second rule, and
• transmitting said second item to said first network node.

A method of providing trusted intermediary services including the following steps:

• at a first apparatus, receiving an item from a second apparatus;
• associating authentication information with said item;
• incorporating said item into a secure digital container;
• associating a first rule with said secure digital container, said first rule at least in part governing at least one aspect of access to or use of said item;
• transmitting said secure digital container and said first rule to a third apparatus, said third apparatus including a protected processing environment at least in part protecting information stored in said protected processing environment from tampering by a user of said third apparatus;
• said third apparatus receiving said secure digital container and said first rule;
• said third apparatus checking said authentication information;
• and
• said third apparatus performing at least one action on said item, said at least one action being governed, at least in part, by said first rule and by a second rule resident at said third apparatus prior to said receipt of said secure digital container and said first rule, said action governance occurring at least in part in said protected processing environment.