Provided is a user equipment (UE) including a first Subscriber Identity Module (SIM) and a second SIM, the UE is configured to receive, from a network node, a first token derived from a seed token using a first cryptographic key associated with the first SIM; derive a first third order token by encrypting the received first token using a second cryptographic key associated with the second SIM; and send the third order token to the network node.