Access control of resources using tokens

An electronic token 200 useable for controlling access to a resource includes a token grantor identifier 202 indicating a token grantor, a token grantee identifier 204 indicating a token grantee, and a resource access control field 206. The resource access control field 206 indicates control of additional limitations of token grantee access to a resource as specified by the token grantor. A method for generating and using the electronic token 200 includes generating an electronic token 200 based on a token grantee identifier 204, a token grantor identifier 202, and a resource access control field 206, wherein the resource access control field 206 indicates control of additional limitations of token grantee access to a resource as specified by the token grantor. The electronic token 200 is transmitted to a token grantee computer system. The token grantee computer system transmits the electronic token 200 to a computer system controlling access to a resource requested by the token grantee computer system.