logical entity capable of cryptographic functions, used to provide the OBE with security services, including data confidentiality, data integrity, authentication and non-repudiation