Abstract: A hardware cartridge performs the function of a verifiable, use-once authorization. The hardware cartridge is provided with physical security so that its contents are not accessible except via a specific protocol. The cartridge stores data in two or more segments. The cartridge responds to a query or challenge by outputting that portion of the data it stores selected by the query or challenge. Assuming the authorizing device has access to the complete contents of the hardware cartridge, it can verify the authenticity by receiving only that portion of the contents selected by its query. In one embodiment, the two segments comprise a pair of shift registers which feed data to a multiplexer; the multiplexer is controlled by the query to output the selected portion of the stored data. In another embodiment, a plurality of segments are stored in a random access memory which is addressed by the query.