Device registration, authentication, and authorization system and method

A method, comprising:

• receiving, by at least one processor, a refresh request from a mobile computing device comprising a representation of a username and a password, first device identifier information, and application key information, wherein the application key information comprises a first application hash-based message authentication code based on an application key and an application key secret;
• verifying, by the at least one processor, the username, the password, the first device identifier information, and the application key information at a server, and transmitting a refreshed token to the mobile computing device;
• receiving, by the at least one processor, a resource request from the mobile computing device comprising the refreshed token and second device identifier information;
• verifying the refreshed token and the second device identifier information;
• and
• transmitting, by the at least one processor, information associated with the resource request to the mobile computing device.

A non-transitory computer-readable medium having instructions stored thereon that, when executed by at least one processor, cause the at least one processor to perform operations comprising:

• receive a refresh request from a mobile computing device comprising a representation of a username and a password, first device identifier information, and application key information, wherein the application key information comprises a first application hash-based message authentication code based on an application key and an application key secret;
• verify the username, the password, the first device identifier information, and the application key information at a server, and transmitting a refreshed token to the mobile computing device;
• receive a resource request from the mobile computing device comprising the refreshed token and second device identifier information;
• verify the refreshed token and the second device identifier information;
• and
• transmit information associated with the resource request to the mobile computing device.