A Digital Transaction Processing Unit (DTPU) including one or more transaction applications operable for a digital transaction with a Digital Transaction Device (DTD), each of the one or more transaction applications being associated with identifying information, the identifying information being capable of identifying a subset of at least one transaction application within the one or more transaction applications, wherein the DTPU is operable, when conducting a transaction with the DTD, to communicate to the DTD the identifying information associated with one of the one or more transaction applications involved in the transaction.

A provisioning agent for provisioning a Digital Payment Device (DPD) which includes a Digital Transaction Processing Unit (DTPU) operable to host one or more transaction applications, the DTPU being further operable to adopt at least one transaction application selected from the one or more transaction applications, the DPD operable for a digital transaction with a Digital Transaction Device (DTD) using the adopted at least one transaction application, the provisioning agent being operable to provide provisioning data to the DPD, the DPD further including apparatus operable to receive the provisioning data, the provisioning data being operable to provide one or more functions to the DPD, the provisioning agent being operable to: prepare one or more first digital objects, receive one or more second digital objects from a second provisioning agent, include at least one of the one or more first digital objects and at least one of the one or more second digital objects in the provisioning data.

A Digital Payment Device (DPD) including a Digital Transaction Processing Unit (DTPU), wherein the DPD includes a first cryptographic key stored in a secure storage area of the DPD, wherein the first cryptographic key matches a second cryptographic key stored on the DTPU, the second cryptographic key being associated with a security domain of the DTPU, wherein the first cryptographic key enables encryption for a digital object, such that the digital object is authenticatable against the second cryptographic key.

A Digital Transaction Processing Unit (DTPU) operable to host one or more transaction applications for digitally transacting with a Digital Transaction Device (DTD), the DTPU including a security hierarchy for hosting the one or more transaction applications, wherein the security hierarchy is configured to host at least one transaction application for transacting in contact digital transactions.

A Digital Transaction Processing Unit (DTPU) operable to host one or more containers, the DTPU further operable to host one or more transaction applications operable for digital transactions with a Digital Transaction Device (DTD), each transaction application derived from one of the one or more containers for installation on the DTPU, wherein the DTPU is operable to reversibly place at least one of the one or more containers into an inactive state such that the at least one container is inoperable to be used to install a transaction application on the DTPU.

A Digital Transaction Processing Unit (DTPU) including a plurality of transaction applications operable for a digital transaction with a Digital Transaction Device (DTD), each of the plurality of transaction applications being associated with a tokenised primary identifier.

A Digital Transaction Processing Unit (DTPU) operable to host one or more transaction applications, the DTPU further operable to reversibly unlock at least one of the one or more transaction applications, wherein each unlocked transaction application is operable for a digital transaction with a Digital Transaction Device (DTD).

A method of customizing authentication credentials for a payment card includes providing, by a payment card configuration circuit of a financial institution computing system, a card configuration interface to a computing device of a customer, the customer having a payment card account maintained by the financial institution computing system, receiving, by the payment card configuration circuit, a request from the computing device to modify an authentication requirement for use of the payment card account, the request including an authentication credential, and assigning, by the payment card configuration circuit, the authentication credential to a payment card associated with the payment card account, wherein the authentication credential is useable to authenticate a user of the payment card.

Disclosed herein are secure transaction systems having secure elements that are initialized and activated independent from each other. The secure element is first initialized to make the secure element turn to a state in which the secure element can be packaged, sold within retail stores, and then injected with encryption keys. The initialization process of the secure element formulates the secure element to ensure trust between the secure elements and secure element activation servers. The process of independently initializing and activating the secure elements while still addressing the security protocols allows the secure element to be packaged and sold within retail stores after initialization, and then activating the secure element at a later date and time when the secure element is ready to be used by a merchant.

Systems and methods for instant issuing of a transaction card, controlling issuing of the instant transaction card, and customization of the transaction card. A system includes at least one processor and a storage medium storing instructions that, when executed by the one or more processors, cause the at least one processor to perform operations including receiving a request to issue a card and directing the customer to insert an identification card. Proceeding with capturing identification and biometric data identifying the customer and verifying the captured identification and biometric data. The operations also include determining whether a combination of the available customer data and the received biometric data is sufficient to verify customer identity. When the combination data are sufficient to verify customer identity, the operations further include issuing a transaction card. The operations further include capturing an image of the customer and issuing a customized transaction card to the customer.