A method for performing a transaction, comprising: receiving, by a server computer from a computing device , first data comprising at least a unique identifier associated with an access device in a transaction and payment data of a user of the computing device ; verifying, by the server computer , the first data utilizing the received unique identifier; transmitting, from the server computer to a token provider computer , a token request message including the payment data; receiving, by the server computer from the token provider computer , a token response message comprising a token and/or a token cryptogram for the payment data; associating, by the server computer , the token and/or token cryptogram with the unique identifier; generating, by the server computer , a session key; generating, by the server computer , encrypted data utilizing the session key by encrypting the received token and/or token cryptogram using the session key; transmitting second data comprising the encrypted data from the server computer to the computing device ; receiving, by the server computer from the access device , third data comprising the encrypted data; generating, by the server computer , decrypted data utilizing the encrypted data and the session key by decrypting the encrypted data utilizing the session key to obtain the token and/or token cryptogram; verifying, by the server computer , the decrypted data by comparing the token and/or token cryptogram in the decrypted data to the token and/or token cryptogram associated with the unique identifier; and in response to verifying the decrypted data, transmitting, from the server computer to a transport computer , an authorization request message for the transaction comprising at least some portion of the third data and the token and/or token cryptogram. receiving, by a server computer from a computing device , first data comprising at least a unique identifier associated with an access device in a transaction and payment data of a user of the computing device ; verifying, by the server computer , the first data utilizing the received unique identifier; transmitting, from the server computer to a token provider computer , a token request message including the payment data; receiving, by the server computer from the token provider computer , a token response message comprising a token and/or a token cryptogram for the payment data; associating, by the server computer , the token and/or token cryptogram with the unique identifier; generating, by the server computer , a session key; generating, by the server computer , encrypted data utilizing the session key by encrypting the received token and/or token cryptogram using the session key; transmitting second data comprising the encrypted data from the server computer to the computing device ; receiving, by the server computer from the access device , third data comprising the encrypted data; generating, by the server computer , decrypted data utilizing the encrypted data and the session key by decrypting the encrypted data utilizing the session key to obtain the token and/or token cryptogram; verifying, by the server computer , the decrypted data by comparing the token and/or token cryptogram in the decrypted data to the token and/or token cryptogram associated with the unique identifier; and in response to verifying the decrypted data, transmitting, from the server computer to a transport computer , an authorization request message for the transaction comprising at least some portion of the third data and the token and/or token cryptogram. <EOS>