The invention protects secrets from user-oriented and software-oriented attacks, including attacks from viruses.
access control is managed outside the application programs that generate and access data items.