1. A method for providing a secure user interface to a secured execution environment on a system comprising said secured execution environment and a second execution environment, comprising the steps of: accepting encrypted user input from a user input device intended for either said secured execution environment or said second execution environment; decrypting said encrypted user input; determining a graphical user element that has focus from among at least one graphical user elements; determining whether a process that owns the graphical user element is in the secured execution environment or in the second execution environment; determining, based on whether the process that owns the graphical user element is in the secured execution environment or in the second execution environment, whether said decrypted user input is intended for said secured execution environment; if said decrypted user input is not intended for said secured execution environment, transferring said decrypted user input to said second execution environment; if said decrypted user input is intended for said secured execution environment, determining a specific destination entity within said secured execution environment for said decrypted user input, and transferring said decrypted user input to said specific destination entity; accepting output from a specific source entity within said secured execution environment and not within said second execution environment; and securely transferring said output to an output device.