A method for providing access to a trusted security zone within a mobile device, the trusted security zone comprising at least hardware resources of the mobile device partitioned in a secure partition in the mobile device, and a plurality of trusted security zone containers, the method comprising: receiving, by an application stored on a network server in communication with the mobile device, trusted service manager validation data issued from a master trusted service manager, wherein the trusted service manager validation data is uniquely associated with a second trusted service manager; receiving, by the application, a trusted security zone master key from a first trusted service manager, the trusted security zone master key providing access to a plurality of trusted security zone containers within the trusted security zone; hashing, by the application, the trusted service manager validation data with the trusted security zone master key, wherein the hashing is completed using a one-way secure hash function; generating, by the application, a trusted security zone sub key based on the hashing to provide access to a specific set of one or more trusted security zone containers of the plurality of trusted security zone containers of the trusted security zone; transmitting, by the application, at least one message to the trusted security zone of the mobile device to provision at least in part the specific set of one or more trusted security zone containers with the trusted security zone sub key, wherein the specific set of one or more trusted security zone containers is provisioned with only the generated trusted security zone sub key so that the first trusted service manager cannot access the specific set of one or more containers with the trusted security zone master key; and providing, by the application, the trusted security zone sub key to the second trusted service manager so that the second trusted service manager may access the specific set of one or more trusted security zone containers, wherein the trusted security zone comprises a hardware assisted trust zone. receiving, by an application stored on a network server in communication with the mobile device, trusted service manager validation data issued from a master trusted service manager, wherein the trusted service manager validation data is uniquely associated with a second trusted service manager; receiving, by the application, a trusted security zone master key from a first trusted service manager, the trusted security zone master key providing access to a plurality of trusted security zone containers within the trusted security zone; hashing, by the application, the trusted service manager validation data with the trusted security zone master key, wherein the hashing is completed using a one-way secure hash function; generating, by the application, a trusted security zone sub key based on the hashing to provide access to a specific set of one or more trusted security zone containers of the plurality of trusted security zone containers of the trusted security zone; transmitting, by the application, at least one message to the trusted security zone of the mobile device to provision at least in part the specific set of one or more trusted security zone containers with the trusted security zone sub key, wherein the specific set of one or more trusted security zone containers is provisioned with only the generated trusted security zone sub key so that the first trusted service manager cannot access the specific set of one or more containers with the trusted security zone master key; and providing, by the application, the trusted security zone sub key to the second trusted service manager so that the second trusted service manager may access the specific set of one or more trusted security zone containers, wherein the trusted security zone comprises a hardware assisted trust zone. <EOS>