A system for providing first and second trusted applications diverse permission to communicate via a secure element associated with a portable communication device, the secure element having a random number generator, the system comprising: a first digital identifier and a first digital token operably associated with the first trusted application, the first trusted application stored on the portable communication device outside of the secure element and the first digital token is generated by the random number generator in the secure element using a global constant associated with the first trusted application as a first seed; a second digital identifier and a second digital token operably associated with the second trusted application, the second trusted application stored on the portable communication device outside of the secure element and the second digital token is generated by the random number generator in the secure element using a global constant associated with the second trusted application as a second seed; a card services module stored on the portable communication device and operably associated with the secure element to provide an application programming interface to the secure element; and a secure data table electronically associated with the card services module, the secure data table including a first entry pairing the first digital identifier with the first digital token and a second entry pairing the second digital identifier with the second digital token, the first entry further including a first set of permissions and the second entry further including a second set of permissions, wherein the card services module issues one or more commands to the secure element based on a first action requested by the first trusted application in conjunction with the presentation of the first digital token only if the one or more commands will not violate the first set of permissions and the card services module issues one or more commands to the secure element based on a second action requested by the second trusted application in conjunction with the presentation of the second digital token only if the one more commands will not violate the second set of permissions. a first digital identifier and a first digital token operably associated with the first trusted application, the first trusted application stored on the portable communication device outside of the secure element and the first digital token is generated by the random number generator in the secure element using a global constant associated with the first trusted application as a first seed; a second digital identifier and a second digital token operably associated with the second trusted application, the second trusted application stored on the portable communication device outside of the secure element and the second digital token is generated by the random number generator in the secure element using a global constant associated with the second trusted application as a second seed; a card services module stored on the portable communication device and operably associated with the secure element to provide an application programming interface to the secure element; and a secure data table electronically associated with the card services module, the secure data table including a first entry pairing the first digital identifier with the first digital token and a second entry pairing the second digital identifier with the second digital token, the first entry further including a first set of permissions and the second entry further including a second set of permissions, wherein the card services module issues one or more commands to the secure element based on a first action requested by the first trusted application in conjunction with the presentation of the first digital token only if the one or more commands will not violate the first set of permissions and the card services module issues one or more commands to the secure element based on a second action requested by the second trusted application in conjunction with the presentation of the second digital token only if the one more commands will not violate the second set of permissions.