diff --git a/interfaces/innerkits/accesstoken/include/access_token.h b/interfaces/innerkits/accesstoken/include/access_token.h
index 383cd6c732aaadafccb36c7572fd295e7db95d04..6cc15595ed20f3dbf96103f09fefd1d6e4ee7fa4 100644
--- a/interfaces/innerkits/accesstoken/include/access_token.h
+++ b/interfaces/innerkits/accesstoken/include/access_token.h
@@ -46,6 +46,7 @@ typedef enum TypeATokenTypeEnum {
     TOKEN_HAP = 0,
     TOKEN_NATIVE,
     TOKEN_SHELL,
+    TOKEN_TYPE_BUTT,
 } ATokenTypeEnum;
 
 typedef enum TypeATokenAplEnum {
diff --git a/services/accesstokenmanager/main/cpp/src/token/accesstoken_remote_token_manager.cpp b/services/accesstokenmanager/main/cpp/src/token/accesstoken_remote_token_manager.cpp
index 19bf0a493699049cbb2ff3745394d827901915a6..1dc737bcdab4cbb9add47486c565b6e782750add 100644
--- a/services/accesstokenmanager/main/cpp/src/token/accesstoken_remote_token_manager.cpp
+++ b/services/accesstokenmanager/main/cpp/src/token/accesstoken_remote_token_manager.cpp
@@ -48,7 +48,7 @@ AccessTokenID AccessTokenRemoteTokenManager::MapRemoteDeviceTokenToLocal(const s
         return 0;
     }
     ATokenTypeEnum tokeType = AccessTokenIDManager::GetInstance().GetTokenIdTypeEnum(remoteID);
-    if ((tokeType < TOKEN_HAP) || (tokeType > TOKEN_SHELL)) {
+    if ((tokeType <= TOKEN_INVALID) || (tokeType >= TOKEN_TYPE_BUTT)) {
         ACCESSTOKEN_LOG_ERROR(
             LABEL, "token %{public}x type is invalid.", remoteID);
         return 0;