A method comprising performing, by a user device : storing, in a secure memory of the user device, a credential and a first encryption key for encrypting the credential for sending in a communication to an authorization server , the authorization server providing an authorization response regarding whether to authorize the user device to gain access to a resource ; obtaining, from a local device in communication with an access server and within communication distance of the user device via a short range communication mechanism, a second encryption key via the short range communication mechanism, the access server managing access to the resource and the second encryption key being associated with the access server ; receiving, from the local device , resource information about the resource ; generating, by the user device , a message including at least: a first portion of data encrypted using the first encryption key, such that the first portion of data may be decrypted by the authorization server , the first portion of data including the credential; and a second portion of data encrypted using the second encryption key, such that the second portion of data may be decrypted by the access server , the second portion of data including at least a portion of the resource information, wherein the first portion of data is different from the second portion of data; and providing the message over a wide area network to both the authorization server and the access server , the message triggering the authorization server to provide the authorization response to the access server . storing, in a secure memory of the user device, a credential and a first encryption key for encrypting the credential for sending in a communication to an authorization server , the authorization server providing an authorization response regarding whether to authorize the user device to gain access to a resource ; obtaining, from a local device in communication with an access server and within communication distance of the user device via a short range communication mechanism, a second encryption key via the short range communication mechanism, the access server managing access to the resource and the second encryption key being associated with the access server ; receiving, from the local device , resource information about the resource ; generating, by the user device , a message including at least: a first portion of data encrypted using the first encryption key, such that the first portion of data may be decrypted by the authorization server , the first portion of data including the credential; and a second portion of data encrypted using the second encryption key, such that the second portion of data may be decrypted by the access server , the second portion of data including at least a portion of the resource information, wherein the first portion of data is different from the second portion of data; and a first portion of data encrypted using the first encryption key, such that the first portion of data may be decrypted by the authorization server , the first portion of data including the credential; and a second portion of data encrypted using the second encryption key, such that the second portion of data may be decrypted by the access server , the second portion of data including at least a portion of the resource information, wherein the first portion of data is different from the second portion of data; and providing the message over a wide area network to both the authorization server and the access server , the message triggering the authorization server to provide the authorization response to the access server . <EOS>