A method is provided for authenticating an action between a control point and a user. A token which performs authentication is presented to the control point. The control point may be authenticated by using the token. The token may include a communication portion that obtains information regarding the control point and that communicates with a token issuer to authenticate the control point based on the information. A user interface portion may be coupled to the communication portion to indicate a result of the authentication to a user.