The present invention provides a software system which comprises an embedded browser (1), an authenticator (3) and a data channel module (4), wherein the authenticator (3) is adapted to authenticate a user, to authenticate a data channel (41) and to bind the user authentication with the authenticated channel (41), and the authenticator (3) is further adapted to communicate with the user via a graphical user interface of the embedded browser (1) using graphical and control primitives (2) of the authenticator (3) and/or using a stand-alone graphical user interface (5) of the authenticator, and wherein the data channel module (4) is adapted to communicate with service provider servers via a secure protocol, to communicate with the embedded browser (1) and to communicate with the authenticator (3). The invention further provides a method of authentication using this system, which increases security and user comfort when accessing services and data requiring authentication.