| CPC H04L 9/0822 (2013.01) [H04L 9/0861 (2013.01)] | 19 Claims | 

| 
               1. A method comprising: 
            generating, by a token server computer, a token server computer public-private key pair comprising a token server computer public key and a token server computer private key 
                generating, by the token server computer, a re-encryption key using a gateway computer public key and the token server computer private key; 
                receiving, by token server computer from a gateway computer, a credential; 
                producing, by the token server computer, a first ciphertext by encrypting the credential with a cryptographic key; 
                producing, by the token server computer, a second ciphertext by encrypting the cryptographic key using the token server computer public key; and 
                transmitting, by the token server computer a data item comprising the first ciphertext and the second ciphertext to the gateway computer, wherein the gateway computer generates a token by hashing the data item, wherein the token is subsequently used by a user associated with the credential to obtain a resource from a resource provider in an interaction, wherein the re-encryption key is configured to re-encrypt the second ciphertext in the interaction. 
               |