Abstract: A system, method, and apparatus are defined that increase data security by offering a frequently changing Authorization Token that includes user-modifiable criteria. Without validation of the Authorization Token, a personal identifier, such as a Social Security Number or account number, is not accepted as a means to transact business or release information. A single mechanism allows both authentication of the owner of a personal identifier and the owner's ability to specify whether and how its use is authorized.