This book presents designs for architecture, flexible portable security based on the traditional security model that involves a security kernel which controls access to security relevant objects and attributes based on the configured security policy. Layered on top of the kernel are various objects which abstract core functionality such as encryption capability and digital signatures, certificate management, and secure and wrap session data (email encryption) in a way that allows them to be easily transferred to the cryptographic device, such as smart cards and crypto accelerators for extra performance or security.