Secure token implementation

摘要

A method for obtaining a token for use in a transaction comprising the steps of: determining that a token is required for use in a transaction 903; obtaining an encrypted token 905; obtaining, from a secure element; SE, of a user device, one or more keys for decrypting the encrypted token 907; and using the one or more keys to decrypt the token so that the decrypted token is usable in a transaction 909. Advantageously, security is improved since if malicious activity results in tokens being retrieved from the user device, the encrypted tokens are unusable.