System and method for secure customization of a personal token during a personalization step

摘要

The invention relates to a method for issuing a personal token to a cardholder, wherein a Card Management System CMS manages the issuance and administration of the personal token, a Web Site of the institution lets the cardholder customize his personal token, and a personalization unit personalizes the personal token according to CMS data provided by the Card Management System CMS. The Web Site requests the cardholder to enter the customization data which must be present in CMS data for his personal token. The data customized by the cardholder are enciphered and sent to the CMS. The enciphered customized data are inserted into the record created by the CMS as if it was a classic generated data. Therefore, the financial institution does not need to perform significant changes in the CMS. The record created by the CMS is provided to the personalization unit which deciphers the customized data.