System and Method for Anti-Phishing Authentication

A method for providing security against phishing attacks during client access of a server, the method comprising:

• providing from the server, upon initiation of a client-server session by the client, an encrypted commitment;
• receiving at the server, a dynamic credential from the client, in response to receipt of the encrypted commitment;
• validating the dynamic credential at the server;
• upon successful validation, transmitting from the server, a commitment key to the client, the commitment key enabling the client to authenticate the server, wherein the client is prohibited from transmitting a static credential until the client authenticates the server.

A system for providing security against phishing attacks during client access of a server, the system comprising:

• a server including a processor programmed and configured to perform the steps of:
• providing from the server, upon initiation of a client-server session over a network by the client, an encrypted commitment;
• receiving at the server, a dynamic credential from the client, in response to receipt of the encrypted commitment;
• validating the dynamic credential at the server;
• upon successful validation, transmitting from the server, a commitment key to the client, the commitment key enabling the client to authenticate the server, wherein the client is prohibited from transmitting a static credential until the client authenticates the server.