A security unit which is suitable for an IoT device, for running one or more applications for a secured exchange of data with one or more servers which provide web services, with the security unit comprising:
- a means for mapping original data onto corresponding replacement data and/or vice versa, wherein the original data and/or replacement data each form an original key and/or replacement key and/or can be used to form the original key and/or replacement key,
- a means for detecting the replacement key which is supplied by an application which is run, and which corresponds to the original key;
- and
- means for providing a requested original key, corresponding to the replacement key, using the specified means for mapping, in order to be able to use the original key for the secured exchange of data with the server.