| Term | Definition |
|---|---|
| Device Partner | An organization that integrates with PP TSP to enable tap-to-pay functionality on their NFC-enabled hardware. |
| Funding Primary Account Number (FPAN) | The actual card number. |
| Green Path | The provisioning path the card network selects when a token can be approved without additional identity verification. The token moves directly to ACTIVE. |
| Identity Verification (IDV) | An additional step required in the Yellow Path when the network requests user authentication before activating a token. |
| Key Encryption Key (KEK) | Used to encrypt payment credential data returned to the client. |
| Lifecycle Management (LCM) | Operations to activate, suspend, or close a token enrollment. |
| Near Field Communication (NFC) | The wireless protocol enabling contactless tap-to-pay transactions. |
| Network Token / TPAN | A secure substitute for the real card number (FPAN), unique per device and card. |
| Payment Credential | A dynamically generated, single-use cryptographic value required to authorize an NFC transaction. |
| PayPal Token Service Provider (PP TSP) | PayPal’s service that generates, delivers, and manages the full lifecycle of payment tokens across supported networks on behalf of device partners. |
| Provisioning | The process of generating a token and delivering it to a device for storage, triggered when a user adds a payment method. |
| Secure Credential Services (SCS) | PayPal’s product umbrella for in-store tap-to-pay credential functionality, of which PP TSP is a core component. |
| Token Lifecycle | The set of states a token can move through: ACTIVE, CLOSED, PENDING_TOKEN_ACTIVATION, PENDING_VERIFICATION_REQUIRED, and SUSPENDED. |
| Token Requestor ID (TRID) | A unique 11-digit identifier enabling the partner to request network tokens. |
| Token Unique Reference (TUR) | The network-assigned identifier for a provisioned token. |
| Wallet Server | The device partner’s backend systems that integrate with PP TSP. |
| Yellow Path | The provisioning path the card network selects when identity verification (IDV) is required before a token activates. The token is held in PENDING_VERIFICATION_REQUIRED until the cardholder completes verification, then moves to ACTIVE. |
Key concepts for NFC device tokenization
Use this page to look up terms and abbreviations used throughout the NFC device tokenization documentation.