A system for permitting a communication of at least one set of controlled credentials connected to a presenter from a server to a network endpoint, said system comprising: at least one network endpoint; at least one accepting appliance configured to send an accepting appliance communication, said accepting appliance communication containing a secret keycode pertaining to said presenter and a once-off shared keycode; at least one presenting appliance configured to send a presenting appliance communication, said presenting appliance communication containing a presenter identifier pertaining to said presenter and said once-off shared keycode; at least one server that further comprises a processor, at least one communications interface and memory storing at least one entry pertaining to said at least one set of connected controlled credentials, each entry being affiliated to at least one record, the record pertaining to any one presenter and comprises a presenter identifier and a secret keycode bound to the presenter identifier; wherein said at least one server is configured to: a) receive said accepting appliance communication; b) receive said presenting appliance communication; c) seek a match of said once-off shared keycode contained in said accepting appliance communication with said once-off shared keycode contained in said presenting appliance communication; d) initiate a search for a target record by linking said secret keycode in said accepting appliance communication with said presenter identifier in said presenting appliance communication, both said accepting appliance communication and said presenting appliance communication containing the same once-off shared keycode (108b, 109b); e) conduct the search for said target record that comprises both said secret keycode and said presenter identifier; f) identify an entry affiliated with said target record; g) permit the retrieval of said at least one set of connected controlled credentials pertaining to said entry and permit the release of said at least one set of connected controlled credentials to said network endpoint, said network endpoint being a permitted recipient of a type of said at least one set of connected controlled credentials. at least one network endpoint; at least one accepting appliance configured to send an accepting appliance communication, said accepting appliance communication containing a secret keycode pertaining to said presenter and a once-off shared keycode; at least one presenting appliance configured to send a presenting appliance communication, said presenting appliance communication containing a presenter identifier pertaining to said presenter and said once-off shared keycode; at least one server that further comprises a processor, at least one communications interface and memory storing at least one entry pertaining to said at least one set of connected controlled credentials, each entry being affiliated to at least one record, the record pertaining to any one presenter and comprises a presenter identifier and a secret keycode bound to the presenter identifier; a) receive said accepting appliance communication; b) receive said presenting appliance communication; c) seek a match of said once-off shared keycode contained in said accepting appliance communication with said once-off shared keycode contained in said presenting appliance communication; d) initiate a search for a target record by linking said secret keycode in said accepting appliance communication with said presenter identifier in said presenting appliance communication, both said accepting appliance communication and said presenting appliance communication containing the same once-off shared keycode (108b, 109b); e) conduct the search for said target record that comprises both said secret keycode and said presenter identifier; f) identify an entry affiliated with said target record; g) permit the retrieval of said at least one set of connected controlled credentials pertaining to said entry and permit the release of said at least one set of connected controlled credentials to said network endpoint, said network endpoint being a permitted recipient of a type of said at least one set of connected controlled credentials.