Abstract: A secure protocol for registering a user, device and application with a computing device, such as a server, is provided. The protocol uses a single sign-on or registration request that enables multiple applications executing on single mobile computing device to access server resources' without each application separately registering with the server. After registration, a server is able to determine which user is using which application on which computing device whenever a request is sent from a device to the server. This type of registration enables fine grained access control to protected resources, such as information and/or services, of the server.

Abstract: The system and method of the present disclosure relates to securing financial data associated with an online payment made over a network at a merchant website, without sharing financial details with the merchant. Merchants register with financial institutions of their customers in order to form a trusted and secure relationship. When a customer purchases an item at the merchant website, a payment option is presented to the customer on the merchant website. The customer is then redirected to a website of the financial institution to authenticate the payment. Once the payment is authenticated, the financial institution may pay the merchant using a secure connection. The customer may also grant the merchant permission to share consumer profile information. Thus, when the consumer shops online at the merchant website, payment may be made to the online merchant directly from the financial institution of the consumer without having to share any financial details.