A method comprising: receiving, by an authorization server a request from an access application installed on a communication device to synchronize time with the authorization server; providing, by the authorization server, an authorization network time to the access application of the communication device; subsequent to the communication device transitioning from an active state to an inactive state and then back to the active state, receiving, by the authorization server an access credential from an access device, the access credential comprising: a timestamp generated by the communication device; account information; determining, by the authorization server, whether the access credential has reliable timestamp information indicating whether the communication device had successfully executed a predetermined shutdown sequence by examining the timestamp for a reset value; determining, by the authorization server that the account information identifies a valid account; if it is determined that the access credential has reliable timestamp information: determining, by the authorization server, whether the access credential is being used within its time-to-live threshold by comparing the timestamp information with a current authorization network time to calculate the time elapsed since the access credential was generated; and granting, by the authorization server, the communication device access to a requested service in a case that the authorization server determ ines: that the access credential has reliable timestamp information having a timestamp with a non-reset value, that the account information identifies a valid account, and that the access credential has not expired; requesting, by the authorization server, step-up authentication from the user on the communication device in a case that the timestamp has a reset value indicating that the communication device did not successfully execute the predetermined shutdown sequence and that the account information identifies a valid account. receiving, by an authorization server a request from an access application installed on a communication device to synchronize time with the authorization server; providing, by the authorization server, an authorization network time to the access application of the communication device; subsequent to the communication device transitioning from an active state to an inactive state and then back to the active state, receiving, by the authorization server an access credential from an access device, the access credential comprising: a timestamp generated by the communication device; account information; a timestamp generated by the communication device; account information; determining, by the authorization server, whether the access credential has reliable timestamp information indicating whether the communication device had successfully executed a predetermined shutdown sequence by examining the timestamp for a reset value; determining, by the authorization server that the account information identifies a valid account; if it is determined that the access credential has reliable timestamp information: determining, by the authorization server, whether the access credential is being used within its time-to-live threshold by comparing the timestamp information with a current authorization network time to calculate the time elapsed since the access credential was generated; and granting, by the authorization server, the communication device access to a requested service in a case that the authorization server determ ines: that the access credential has reliable timestamp information having a timestamp with a non-reset value, that the account information identifies a valid account, and that the access credential has not expired; determining, by the authorization server, whether the access credential is being used within its time-to-live threshold by comparing the timestamp information with a current authorization network time to calculate the time elapsed since the access credential was generated; and granting, by the authorization server, the communication device access to a requested service in a case that the authorization server determ ines: that the access credential has reliable timestamp information having a timestamp with a non-reset value, that the account information identifies a valid account, and that the access credential has not expired; that the access credential has reliable timestamp information having a timestamp with a non-reset value, that the account information identifies a valid account, and that the access credential has not expired; requesting, by the authorization server, step-up authentication from the user on the communication device in a case that the timestamp has a reset value indicating that the communication device did not successfully execute the predetermined shutdown sequence and that the account information identifies a valid account.