Otherwise, i.e. in case the other tamper-protected semiconductor module (payee) has successfully received the transferred electronic tokens (and nothing else thereafter), it terminates the off-line transaction protocol after expiry of a previously defined lock timeout period in a final but unfair state in which the other tamper-protected semiconductor module (payee) has irrevocably destroyed t