Method and apparatus for secure cryptographic key storage, certification and use

Apparatus for managing access to a data item cryptographically secure access control, comprising: a) an input logic (300) configured to receive a candidate access code; b) a first memory (320) configured to store a data item access control; c) a first logical first cryptographic (310, 325) operatively connected to said input logic and said first memory and configured to process said data item access control using said code candidate access to provide an element of control data processing access to a plurality, but not all codes candidates access, while preserving a characteristic structural format for said data elements access control where only one element data access control is valid and wherein said first cryptographic logic is configured to detect an attempt to use an invalid access code; d) an output logic (335) configured to provide said element data processing control access point to a user of said apparatus.