Abstract: A system and method for securely managing event resources includes receiving a request for a resource from a user device via an API gateway; generating and displaying a list of available resources; and receiving a request for a selected resource. The method involves verifying an attestation of a cryptographic key pair generated by a secure element on the user device, by validating a certificate of conformance. The secure element further creates a digital signature by using a private key. A server issues a token by embedding a public key and the digital signature in the token. The server transmits a notification to the user device confirming an issuance of the token and updates a database with transaction details. At an event location, the server retrieves the public key from the token to verify against the public key stored in the database. Upon successful validation, access is granted.