Data processing apparatus and method

A method of performing a secure data processing operation, the method comprising the execution by a processing apparatus in a secure environment of the steps of:

• certifying compliance with a designated process which is defined by a plurality of rules which are specified in a public template, at least two rules specified in the public template include a certification requirement which requires rule compliance data for complying with each of said at least two rules to be certified by a respective valid certifying authority, the certifying step comprising:
• i) for each rule specified in the template, receiving rule compliance data;
• and ii) checking the received rule compliance data to verify that compliance with all the rules specified in the template, including checking that for rules having a certification requirement the associated rule compliance data includes a digital signature signed by a valid certifying authority for that rule;
• performing the secure data processing operation to provide output data;
• digitally signing a data record comprising a process compliance certificate digitally verifying compliance with the rules specified in the template;
• and outputting the digitally signed data record;
• and
• wherein at least one of the rules specified in the public template includes a certification requirement, and wherein the certifying step comprises checking that for rules having a certification requirement, the associated rule compliance data includes a digital signature signed by a valid rule certifying authority for that rule.

A data processing apparatus comprising:

• a secure data store;
• a processor operable to carry out a processing operation on data stored in the secure data store, wherein said processor is in a secure environment;
• and
• a controller operable to prevent processing of the data stored in the secure data store unless a plurality of rules specified in a public template associated with said processing operation are complied with, wherein for at least two of the plurality of rules, compliance with the rules requires certification by a respective valid certifying authority.

A non-transitory computer readable medium storing instructions which when executed by at least one processor causes a process comprising:

• for each rule specified in a template, receiving rule compliance data;
• checking the received rule compliance data to verify that all the rules specified in the template have been complied with, including checking that for rules having a certification requirement the associated rule compliance data includes a digital signature signed by a valid rule certifying authority for that rule;
• and
• issuing a process compliance certificate digitally signed by the process certifying authority if the checking step verifies compliance with the rules specified in the template.