A security module having assigned thereto a unique electronic identifier (EID), comprising: a non-volatile memory having configured therein a plurality of unassigned secure domains, an unassigned secure domain being a security domain which is not associated to an owner such as a service provider, each of the unassigned secure domains having assigned thereto a unique application identifier, AID, each of the unassigned secure domains accessible via a respective first security value of a plurality of first security values; a communication interface arranged to receive: - first data encrypted with a first security value, the first data including a second security value and a secure domain application, - an identifier of a selected secure domain of the plurality of unassigned secure domains, and - second data encrypted with the second security value; and a processing unit coupled to the communication interface and the non-volatile memory wherein the processing unit is arranged to: based on the identifier of the selected secure domain, deliver the first data encrypted with the first security value to the selected secure domain, wherein the first security value corresponds to a security value stored in the selected secure domain; decrypt the received first data; deliver the second data to the selected secure domain. a non-volatile memory having configured therein a plurality of unassigned secure domains, an unassigned secure domain being a security domain which is not associated to an owner such as a service provider, each of the unassigned secure domains having assigned thereto a unique application identifier, AID, each of the unassigned secure domains accessible via a respective first security value of a plurality of first security values; a communication interface arranged to receive: - first data encrypted with a first security value, the first data including a second security value and a secure domain application, - an identifier of a selected secure domain of the plurality of unassigned secure domains, and - second data encrypted with the second security value; and - first data encrypted with a first security value, the first data including a second security value and a secure domain application, - an identifier of a selected secure domain of the plurality of unassigned secure domains, and - second data encrypted with the second security value; and a processing unit coupled to the communication interface and the non-volatile memory wherein the processing unit is arranged to: based on the identifier of the selected secure domain, deliver the first data encrypted with the first security value to the selected secure domain, wherein the first security value corresponds to a security value stored in the selected secure domain; decrypt the received first data; deliver the second data to the selected secure domain. based on the identifier of the selected secure domain, deliver the first data encrypted with the first security value to the selected secure domain, wherein the first security value corresponds to a security value stored in the selected secure domain; decrypt the received first data; deliver the second data to the selected secure domain. <EOS>