Tokenized authorization is a standard security mechanism in the payment card industry, where the user's real card number is not handed directly to the merchant or agent; instead, a substitute token that can only be used at a specific merchant, scenario or device and can be revoked at any time is generated.