// Provider should usually instantiate session as member variable as session lifetime 
    // defines the tokens lifetime also, consumer may generate session on-demand based as well

    RFTokenClient client;
    User::LeaveIfError(client.Connect());
    CleanupClosePushL(client);

   // Provider, generating token based on known uid (made up uid in this example ;)

   TInt64 token = 0;
   TPckg<TInt64> tokenbuf(token); 
    
   _LIT(KMYPRIVATEFILE, "z:\\private\\1028289F\\focus.png"); // full path with drive letter must be given
   
   TSecureId consumerSecId(0x10282845); 

   User::LeaveIfError(iClient.GenerateToken(),TSecurityPolicy(consumerSecId), tokenbuf));

   // Generating token based on existing token
   // Nb. Consumer may ensure extended lifetime for token by "cloning" it
   // (i.e. make sure that token remains valid even the session of orifial provider
   // is closed )  

   TInt64 token2 = 0;
   TPckg<TInt64> tokenbuf2(token2); 

    User::LeaveIfError(client.GenerateToken(tokenbuf, Application()->AppDllUid(), tokenbuf2));

  // Consumer, opening file based on token

   RFile file;
   User::LeaveIfError(client.OpenFileForToken(file, tokenbuf2));