A device for ordering and validating an electronic ticket, the device comprising: a ticket application; a security element comprising a trusted agent; a registry; a ticket storage; and sending and receiving means (262, 263), wherein the registry comprises at least one register having a ticket unique identifier field and a corresponding random identifier and the electronic ticket comprises a ticket unique identifier; characterized in that: - the trusted agent is adapted to generate a random identifier in response to a request from the ticket application, pass the random identifier as a processed random identifier to the ticket storage; to store said random identifier in the registry and as a processed random identifier in the ticket storage wherein the processing of the random identifier is by signing the random identifier with the trusted agent signature; - the ticket application is adapted to: generate a request for an electronic ticket, the request comprising said processed random identifier and the digital signature of the processed random identifier; and to send said request from the ticket application to a ticket issuing system using the sending means; - the trusted agent is adapted to check the signature of the issuing system of an electronic ticket received in sealed state by the receiving means from the ticket issuing system by comparing the issuer signature with the ticket data wherein the electronic ticket comprises elements belonging to a public part and elements belonging to a private part, wherein the private part is in a sealed state; - the ticket application is adapted to compare an identifier in the electronic ticket with the random identifiers stored in the registry, if the outcome of the signature check was positive; - the trusted agent is adapted to: copy a ticket unique identifier into the ticket unique identifier field corresponding to the random identifier in the registry, if a random identifier corresponding to the identifier was found; and to sign a ticket data of the electronic ticket, thereby changing the electronic ticket from sealed state into a validated state by changing the state of the private part from a sealed state to a validated state; - the trusted agent is further adapted to: send the ticket to the ticket application; and - the ticket application is further adapted to: send the electronic ticket in validated state into the ticket storage. - the trusted agent is adapted to generate a random identifier in response to a request from the ticket application, pass the random identifier as a processed random identifier to the ticket storage; to store said random identifier in the registry and as a processed random identifier in the ticket storage wherein the processing of the random identifier is by signing the random identifier with the trusted agent signature; - the ticket application is adapted to: generate a request for an electronic ticket, the request comprising said processed random identifier and the digital signature of the processed random identifier; and to send said request from the ticket application to a ticket issuing system using the sending means; - the trusted agent is adapted to check the signature of the issuing system of an electronic ticket received in sealed state by the receiving means from the ticket issuing system by comparing the issuer signature with the ticket data wherein the electronic ticket comprises elements belonging to a public part and elements belonging to a private part, wherein the private part is in a sealed state; - the ticket application is adapted to compare an identifier in the electronic ticket with the random identifiers stored in the registry, if the outcome of the signature check was positive; - the trusted agent is adapted to: copy a ticket unique identifier into the ticket unique identifier field corresponding to the random identifier in the registry, if a random identifier corresponding to the identifier was found; and to sign a ticket data of the electronic ticket, thereby changing the electronic ticket from sealed state into a validated state by changing the state of the private part from a sealed state to a validated state; - the trusted agent is further adapted to: send the ticket to the ticket application; and - the ticket application is further adapted to: send the electronic ticket in validated state into the ticket storage.