System and method for authenticating devices in distributed environment

A client for providing computer implemented services using secured data stored in a data source, comprising:

• startup storage for storing startup data and verification data usable to verify that the startup data will give rise to a predetermined entity when the startup data is executed by the client;
• memory;
• and
• a processor adapted to execute computer instructions that cause the processor to:
• perform a first authentication of the client to the data source using:
• a service tag of the client, and
• a portion of the verification data;
• perform a second authentication of the data source to the client using:
• all of the verification data;
• when the first authentication indicates that the client is authentic and the second authentication indicates that the data source is authentic, obtaining a token usable to access secured data stored in the data source;
• and
• when the second authentication indicates that the data source is not authentic, aborting attempts to access the secured data.

A data source for securing data stored in a data source, comprising:

• storage for storing a copy of verification data stored in a client;
• memory;
• and
• a processor adapted to execute computer instructions that cause the processor to:
• perform a first authentication of the client to the data source using:
• a service tag of the client, and
• a portion of the copy of the verification data;
• perform a second authentication of the data source to the client using:
• all of the copy of the verification data;
• when the first authentication indicates that the client is authentic and the second authentication indicates that the data source is authentic, providing a token to the client usable to access secured data stored in the data source;
• and
• when the first authentication indicates that the client is not authentic, preventing the client from accessing the data.