A system including one or more servers, programmed to responsive to receiving a token request from a vehicle to access content stored in a content cloud, validate the token request against pre-defined policies; responsive to a successful policy validation, verify token generating responsibility based on a validation result and pre-defined rules; and responsive to verifying the system has the token generating responsibility, generate a token for the token request.