Soft token system

A non-transitory computer-readable storage medium tangibly embodying a set of instructions representing a soft token application, which when executed by one or more processors of a mobile device, cause the one or more processors to perform a method comprising:

• obtaining via an Application Programming Interface (API) of an operating system of the mobile device, a unique device ID of the mobile device that uniquely identifies the mobile device;
• requesting via an Internet Protocol (IP)-based network to which the mobile device is connected, a seed from a provisioning server coupled to the IP-based network, wherein the seed is for generating a One-Time Password (OTP) for accessing the secure network resource;
• and
• responsive to receipt of the seed, wherein the seed is transmitted to the mobile device via a first out-of-band channel in encrypted form based on a secret key, the unique device ID and a hardcoded-pre-shared key:
• decrypting the received encrypted seed and installing the seed;
• generating the OTP based on the seed;
• and
• binding the OTP to the mobile device by encrypting the seed with the unique device ID and the hardcoded pre-shared key.