Abstract: A system and method for verifying the origin of a client request. The system includes two devices, a “Security Device” which resides within the web-server in the client end, and an “Authenticator Device” which resides within the web-server in the server end. The “Security Device” adds an Extended Validation SSL (EV SSL) certificate to the client-side web-request. The “Authenticator Device” then parses the http request from the client, gets the EV SSL certificate and gets the “Organization Name” of the client from this EV SSL certificate. If the “Organization Name” matches a list of “Organization” that the “Authenticator Device” is allowed to do a transaction, then the client request is authenticated and the transaction goes through, else the client-request is denied.