Secure zone for secure purchases

An apparatus, comprising:

• a secure zone comprising an interface to a non-secure zone, the secure zone further configured to:
• execute a task having one or more subtasks, wherein the task and the subtasks have respective executable code for one more secure transactions, the task and the subtasks are digitally signed by respective code providers, and execution is switched between the task and the subtasks;
• and
• apply respective sets of permissions describing access to certain portions of the secure zone while the respective executable code of the task and subtasks are executed, wherein the respective set of permissions for the task are based on at least one of information associated with the signed task and information in a digital certificate of the respective code provider for the task, and wherein the respective set of permissions for the subtasks are based on at least one of information associated with the signed subtasks and information in a digital certificate of the respective code provider for the subtasks.