A method for mapping a payment account to a mobile cloud account number comprising: generating, by a generating device of a service provider, an integrated circuit card (ICC) RSA key pair including an ICC public key and an ICC private key; generating, by the generating device of the service provider, an ICC master key based on at least a master key identifier; transmitting, by a transmitting device of the service provider, the ICC public key, the ICC private key, the ICC master key, and the master key identifier to a mobile device for storage in a secure element; receiving, by a receiving device of the service provider, a real card account number (RCA) corresponding to a payment account; identifying, by a processing device of the service provider, attributes of the RCA; identifying, by the processing device of the service provider, a mobile cloud account number (MCA) based on the attributes of the RCA; receiving, by the receiving device of the service provider, an issuer private key, an issuer private key certificate and an issuer public key certificate; generating, by the generating device of the service provider, an ICC public key certificate based on certification of the ICC public key by the issuer private key; creating, by the processing device of the service provider, a post issuance script configured to store mobile cloud account data in the secure element of the mobile device, wherein the mobile cloud account data includes at least the issuer public key certificate, the MCA, and the ICC public key certificate; transmitting, by the transmitting device, of the service provider, the created post issuance script to the mobile device; and storing, in a mapping database, of the service provider, a mapping record, wherein the mapping record includes at least the master key identifier, the MCA, and the RCA. generating, by a generating device of a service provider, an integrated circuit card (ICC) RSA key pair including an ICC public key and an ICC private key; generating, by the generating device of the service provider, an ICC master key based on at least a master key identifier; transmitting, by a transmitting device of the service provider, the ICC public key, the ICC private key, the ICC master key, and the master key identifier to a mobile device for storage in a secure element; receiving, by a receiving device of the service provider, a real card account number (RCA) corresponding to a payment account; identifying, by a processing device of the service provider, attributes of the RCA; identifying, by the processing device of the service provider, a mobile cloud account number (MCA) based on the attributes of the RCA; receiving, by the receiving device of the service provider, an issuer private key, an issuer private key certificate and an issuer public key certificate; generating, by the generating device of the service provider, an ICC public key certificate based on certification of the ICC public key by the issuer private key; creating, by the processing device of the service provider, a post issuance script configured to store mobile cloud account data in the secure element of the mobile device, wherein the mobile cloud account data includes at least the issuer public key certificate, the MCA, and the ICC public key certificate; transmitting, by the transmitting device, of the service provider, the created post issuance script to the mobile device; and storing, in a mapping database, of the service provider, a mapping record, wherein the mapping record includes at least the master key identifier, the MCA, and the RCA. <EOS>