A `token` is a term that can be used for a PCI card, a usb stick, a HSM (Hardware Security Module), a smartcard. A "token" is a device, not an API. PKCS #11 and smartcard accesses tokens, they are not tokens themselves. One could say that some JCE providers give access to tokens.

It's proposed to rename jdk.crypto.token to jdk.crypto.cryptoki.

"The PKCS#11 standard specifies an application programming interface (API), called “Cryptoki,” for devices that hold cryptographic information and perform cryptographic functions."