Managing third-party access to confidential data using dynamically generated application-specific credentials

A computer-implemented method, comprising:

• receiving, using at least one processor, a first request for an element of data, the first request comprising an access token and first credential data associated with an application program;
• when the first credential data corresponds to second credential data associated with the application program, determining, using the at least one processor, that the requested data element is accessible to the application program and performing, using the at least one processor, operations that validate the access token;
• based on the validation of the access token, obtaining and encrypting the requested data element using the at least one processor;
• and
• using the at least one processor, transmitting the encrypted data element to a device.

A tangible, non-transitory computer-readable medium storing instructions that, when executed by at least one processor, cause the at least one processor to perform a method, comprising:

• receiving a first request for an element of data, the first request comprising an access token and first credential data associated with an application program;
• when the first credential data corresponds to second credential data associated with the application program, determining that the requested data element is accessible to the application program and performing operations that validate the access token;
• based on the validation of the access token, obtaining and encrypting the requested data element;
• and
• transmitting the encrypted data element to a device via a communications interface.