Abstract: A user host device privately controls a shared remote process that executes in a remote device, in which respective public keys between the user host device and the shared remote process are exchanged through an intermediary device, the user host device validates the process public key based on current and previous nonce values, and sends to the remote process a double-encrypted process command, and the remote process double-decrypts the process command, executes the process command, and then returns a double-encrypted response to the user host device which decrypts and validates the response. Trust between the user host device and the remote process is established by the user host device verifying a remote process response, and the trust is maintained by chaining each session nonce with the previous session nonce, without the knowledge of the intermediary process host device.