Patent ID: 8387137

Claim:
A method comprising: assigning a token processing system (TPS) client a token profile for a group comprising a plurality of tokens, the token profile stored in a profile data structure, wherein the token profile specifies at least one of a plurality of predefined roles for the TPS client, and wherein each of the plurality of predefined roles is associated with predefined access to entries of a token database; receiving, by a TPS executing on a computing system, a request from the TPS client over a network to perform an operation on the entries of the token database that correspond to the group, wherein the TPS is configured to communicate with the token database and configured to communicate over the network with one or more additional clients each having at least one of the plurality of tokens; and allowing the TPS client access to the token database to perform the operation when permitted by the predefined roles specified in the token profile on the entries of the token database that correspond to the group identified by the token profile.