1. A system for transferring a cryptographic key and its usage policies from a security token to at least a first data processing unit, said key enabling access to at least one resource by said at least a first data processing unit subject to requirements prescribed in said usage policies, the system comprising: i. said security token, which is a hardware device, including said key, said usage policies, and a transfer section that transfers said key to said at least a first data processing unit, ii. said at least a first data processing unit including a key application section that applies the key in accordance with said requirements prescribed in said usage policies, iii. a communications section that performs data exchanges between said security token and said at least a first data processing unit, wherein: mutual authentication is performed between said security token and said at least a first data processing unit before said key is transferred, said at least one resource is accessible to said first data processing unit only if said key is present in said first data processing unit and verified by at least a second data processing unit, and said key facilitates said at least a first data processing unit to perform a function selected from the group consisting of surrogate operations for said security token, terminal activation, personalization of an intelligent device, access to said at least one resource, and loyalty credit management.