Access to state data by a client process such as state data in an Online Transaction Processing arrangement is controlled through generation of and exchanging of a dual-component token. The first component of the token is an Index value which indirectly points to a block of state data assigned to process or user. The second component of the token is a sequence value, such as a Random Unique Sequence value, which is also associated with the block of state data for a process. With each transaction request, a user process provides the token to the OLTP server, which then verifies the sequence numbers of the state data and the token match before allowing access to the data.