Trusted multi-stakeholder environment

An apparatus for controlling a multi-stakeholder environment, the apparatus comprising:

• memory;
• a processor;
• an operating system kernel designed to assign a first domain to a first stakeholder wherein the first domain comprises a first grouping of isolated applications and data, wherein the assigning a first domain includes setting aside system resources for the first grouping of isolated applications and data, wherein the first stakeholder is a service provider of a single electronic device, and wherein the first grouping of isolated applications and data includes applications installed on the single electronic device prior to it being delivered to a user;
• wherein the operating system kernel is further designed to assign a second domain to a second stakeholder, wherein the second domain comprises a second grouping of applications and data, wherein the assigning a second domain includes setting aside system resources for the second grouping of applications and data, wherein the second grouping of applications and data includes applications installed on the single electronic device after it is delivered to the user;
• a security application designed to define a first access policy for the first domain, wherein the first access policy defines which stakeholders are permitted to access the applications and data in the first domain, wherein the access policy is based on type enforcement, wherein all processes and objects include attributes of the form user:role:type;
• and
• wherein the security application is further designed to prevent applications or services in the second domain from accessing data or applications in the first domain according to the first access policy by loading the first access policy into the operating system kernel at runtime.