Secure authorization systems and methods

A computer readable storage medium storing instructions that, when executed by a client device comprising a processor, cause the client device to engage in an authentication process of a right of a user of the client device to access a resource managed by the service provider system comprising:

• receiving a first secure key;
• receiving, from an authentication service system, at least one of a shared secret value common to the authentication service system and the client device and information that may be used to generate the shared secret value;
• securely storing the first secure key and at least one of the shared secret value and the information that may be used to generate the shared secret value in a protected processing environment of the client device;
• receiving a request from the user to access the resource managed by the service provider system;
• generating, in response to the request, a first secure token using, at least in part, the first secure key and the shared secret value;
• sending, to the authentication service system, an authentication request requesting authentication for access to the resource managed by the service provider system, the authentication request comprising one or more authentication credentials, the one or more authentication credentials comprising the first secure token;
• and
• receiving access to the resource managed by the service provider system based on successful authentication of the one or more authentication credentials by the authentication service system.