Authentication System and Method

A computer-implemented system for a user to authorize a service client's access to a secured resource associated with a common identifier without transmitting or otherwise providing the secured resource's common identifier to the service client, the computer-implemented system comprising:

• at least one interface adapted to receive and transmit data in communication with a user's application, a service client's application, or both;
• one or more servers in secure communication with the at least one interface, the one or more servers having:
• a first instruction embodied in a computer readable medium, the first instruction operable to receive registration information received from the user through at least one interface, the registration information comprising a user identifier and at least one secured resource identifier associated with the common identifier of the secured resource, wherein the common identifier and secured resource identifier are not the same;
• a second instruction embodied in a computer readable medium, the second instruction operable to receive an authorization request message to authorize access to the secured resource by the service client, the authorization request message having been received through the at least one interface from the user's application and comprising:
• a first service client identifier;
• a first transaction specific information;
• the user identifier;
• and
• a designated secured resource identifier selected from one of the at least one secured resource identifiers;
• and
• a third instruction embodied in a computer readable medium, the third instruction operable to:
• generate a first transaction specific authentication credential associated with the authorization request, whereby the first transaction specific authentication credential comprises a key string and does not include or reveal the common identifier associated with the designated secured resource identifier;
• receive an access request message from the service client's application through the at least one interface, the access request message comprising:
• a second service client identifier;
• a second transaction specific information;
• and
• a second transaction specific authentication credential whereby the second transaction specific authentication credential was received by the service client's application from the user's application;
• and
• validate the user's request to access the secured resource associated with the designated secured resource identifier without transmitting or otherwise providing the common identifier of the secured resource to the service client by determining if:
• the first service client identifier matches the second service client identifier;
• the first transaction specific information matches the second transaction specific information;
• and
• the first transaction specific authentication credential matches the second transaction specific authentication credential.