A method performed in a secure element, the secure element being arranged to enable user applications of the secure element to verify authenticity of incoming user application commands, and the secure element being adapted to be comprised in a mobile communication terminal, the method comprising the steps of: receiving a command from a secure element reader for a user application on the secure element, the command comprising an application identifier of the user application; determining whether there is a matching user application in the secure element, wherein an identifier of any matching user application matches the application identifier; invoking, when there is a matching user application, the matching user application based on the received command; and wherein the method is characterized by - the command being received via near field communication, - establishing, when there is an absence of any matching user applications, a communication channel utilizing Bearer Independent Protocol with a remote application manager server and sending an absent user application message to the application manager server indicating that the user application has been requested on the secure element, the absent user application message including an identifier of the absent user application and an identifier coupled to the mobile communication terminal, receiving in response to the absent application message, the user application from the application manager server, receiving from the application manager server an application instance state comprising state data of the received application from when the received application was most recently executed in the secure element, and invoking the received user application. receiving a command from a secure element reader for a user application on the secure element, the command comprising an application identifier of the user application; determining whether there is a matching user application in the secure element, wherein an identifier of any matching user application matches the application identifier; invoking, when there is a matching user application, the matching user application based on the received command; and wherein the method is characterized by - the command being received via near field communication, - establishing, when there is an absence of any matching user applications, a communication channel utilizing Bearer Independent Protocol with a remote application manager server and sending an absent user application message to the application manager server indicating that the user application has been requested on the secure element, the absent user application message including an identifier of the absent user application and an identifier coupled to the mobile communication terminal, - the command being received via near field communication, - establishing, when there is an absence of any matching user applications, a communication channel utilizing Bearer Independent Protocol with a remote application manager server and sending an absent user application message to the application manager server indicating that the user application has been requested on the secure element, the absent user application message including an identifier of the absent user application and an identifier coupled to the mobile communication terminal, receiving in response to the absent application message, the user application from the application manager server, receiving from the application manager server an application instance state comprising state data of the received application from when the received application was most recently executed in the secure element, and invoking the received user application.