Patent ID: 8548923

Claim:
A system for facilitating data management on a secure token, comprising: a client having a plurality of applications residing thereon; a secure token having a storage architecture, wherein the storage architecture includes: a directory and one or more attributes associated with the directory, wherein each attribute of the one or more attributes associated with the directory determines a level of access to the directory for one application of the plurality of applications, an application identifier associating the directory with a second application selected from the plurality of applications; one or more cell groups under the directory, each cell group having one or more associated attributes, wherein each attribute of the one or more attributes associated with the cell group determines a level of access to that cell group for one application of the plurality of applications, and one or more cells under each cell group, each cell having one or more associated attributes, wherein each attribute of the one or more attributes associated with the cell determines a level of access to that cell for one application of the plurality of applications, wherein the one or more associated attributes for a first cell group of the one or more cell groups permits access to the first cell group and the one or more associated attributes for the first cell group by the first application and a second application of the plurality of applications, and the one or more attributes associated with the directory deny access to the first cell group to a third application of the plurality of applications; and wherein the one or more attributes associated with a first cell of the first cell group further control operations on contents of the cell by the plurality of applications such that the one or more attributes associated with the first cell permit a first set of operations on the contents of that cell and the one or more attributes associated with the first cell by the first application and permit a second set of operations on the contents of that cell and the one or more attributes associated with the first cell by the second application, wherein the first set of operations is different from the second set of operations; an issuer computer, wherein the issuer computer comprises a set of environments, a set of initial states for the one or more associated attributes for the cell group and the one or more attributes associated with the cell that set a status of the storage architecture on the secure token; and a Value Added Serve Provider computer, wherein the value add service provider comprises control data parameters that are provided to both the issuer and the client to set the one or more associated attributes for the cell group and the one or more attributes associated with the cell.