A device for handling sensitive data comprising at least one first integrated circuit for forming a first trust zone and at least one second integrated circuit, said second integrated circuit forming a second trust zone comprising: - a persistent memory area for storing sensitive data and being located within said second trust zone; - data transfer means for receiving sensitive data from the processing unit of the first integrated circuit, wherein said persistent memory area is adapted to store the sensitive data received through said data transfer means, and wherein said data transfer means is adapted for sending the sensitive data stored in the persistent memory area to the processing unit of the first integrated circuit, - crypto means for de-/encrypting received/stored sensitive data based on a symmetrical crypto method using an active secure key, and - means for initiating and processing the generation of a new secure key after power up, to replace the active secure key at the first and second integrated circuit (10, 20). wherein the first integrated circuit comprises - at least one secure processing unit adapted for processing sensitive data, wherein the first integrated circuit is separated from the second integrated circuit; - the processing unit of the first integrated circuit is adapted to transfer the sensitive data from the first trust zone to the second trust zone for securely storing said data in the persistent memory area of the second trust zone, - wherein the first integrated circuit comprises crypto means for securely transferring the sensitive data based on the symmetrical crypto method using the active secure key which is replaceable by the said new secure key, generated by the second integrated circuit after power up. - a persistent memory area for storing sensitive data and being located within said second trust zone; - data transfer means for receiving sensitive data from the processing unit of the first integrated circuit, wherein said persistent memory area is adapted to store the sensitive data received through said data transfer means, and wherein said data transfer means is adapted for sending the sensitive data stored in the persistent memory area to the processing unit of the first integrated circuit, - crypto means for de-/encrypting received/stored sensitive data based on a symmetrical crypto method using an active secure key, and - means for initiating and processing the generation of a new secure key after power up, to replace the active secure key at the first and second integrated circuit (10, 20). - at least one secure processing unit adapted for processing sensitive data, wherein the first integrated circuit is separated from the second integrated circuit; - the processing unit of the first integrated circuit is adapted to transfer the sensitive data from the first trust zone to the second trust zone for securely storing said data in the persistent memory area of the second trust zone, - wherein the first integrated circuit comprises crypto means for securely transferring the sensitive data based on the symmetrical crypto method using the active secure key which is replaceable by the said new secure key, generated by the second integrated circuit after power up.