System and method for providing security in browser-based access to smart cards

A method for providing a secure connection between a web server application originating on a web server having a website domain name and a security device connected to the web server over a network via a host computer, comprising

• establishing a connection to the web server over a computer network;
• loading a web server application from the web server into the browser;
• executing a browser extension for providing the web server application access to the security device subject to confirm that the web server application may access the security device, the confirming that the web server application may access the security comprises:
• authenticating the web server by verifying that the connection is a secure connection established using a digital certificate issued by a trusted root certificate authority;
• receiving from the web server a connection key issued by an authorizing organization wherein the connection key is cryptographically linked to the authorizing organization, cryptographically linked to a digital certificate of the web server;
• determining whether the connection key presented by the web server is valid and that the connection key is indicative of that the web server application has been properly authorized to access the security device by the authorizing organization;
• if the connection key is valid and indicative of that the webserver application has been properly authorized to access the security device by the authorizing organization, allowing the web server application to connect to the security device;
• and
• if the connection key is not valid or is not indicative of that the webserver application has been properly authorized to access the security device by the authorizing organization, denying the web server application the opportunity to connect to the security device.