A computer implemented system for providing users with secured access to application servers, said system comprising: • a communication engine communicating with a set of communication gadgets, said communication engine configured to receive at least one request from a requesting communication gadget, wherein said request corresponds to a request to access at least one application server; characterized in, that the system further comprises: • hybrid telecommunication means for providing network connectivity said hybrid telecommunication means are cooperating with said communication engine and are adapted to establish an out-of band, private communication link with the requesting communication gadget and allocate out-of-band, private communication bandwidth to the requesting communication gadget, wherein the type of said out-of-band, private communication link is determined based on the type of the communication channel previously associated with the requesting communication gadget., wherein said system includes an authentication engine communicating with the requesting communication gadget through said out-of-band, private communication link, said authentication engine comprising: • challenge-generation means adapted to utilize said out-of-band, private communication bandwidth to transmit multi-factor challenges including first factor challenge, second factor challenge and third factor challenge, to the requesting communication gadget; • verification means adapted to verify the identity of the user associated with the requesting communication gadget based on said user's response to at least one of said multi-factor challenges, said verification means further adapted to verify authenticity of said application server requested access to by said user, based on at least digital certificates associated with said application server; and • linking means adapted to use said private, out of band communication bandwidth to establish a private, out-of-band communication link between the requesting communication gadget and said application server only in the event that said user and said application server are successfully verified by said verification means. • a communication engine communicating with a set of communication gadgets, said communication engine configured to receive at least one request from a requesting communication gadget, wherein said request corresponds to a request to access at least one application server; characterized in, that the system further comprises: • hybrid telecommunication means for providing network connectivity said hybrid telecommunication means are cooperating with said communication engine and are adapted to establish an out-of band, private communication link with the requesting communication gadget and allocate out-of-band, private communication bandwidth to the requesting communication gadget, wherein the type of said out-of-band, private communication link is determined based on the type of the communication channel previously associated with the requesting communication gadget., wherein said system includes an authentication engine communicating with the requesting communication gadget through said out-of-band, private communication link, said authentication engine comprising: • challenge-generation means adapted to utilize said out-of-band, private communication bandwidth to transmit multi-factor challenges including first factor challenge, second factor challenge and third factor challenge, to the requesting communication gadget; • verification means adapted to verify the identity of the user associated with the requesting communication gadget based on said user's response to at least one of said multi-factor challenges, said verification means further adapted to verify authenticity of said application server requested access to by said user, based on at least digital certificates associated with said application server; and • linking means adapted to use said private, out of band communication bandwidth to establish a private, out-of-band communication link between the requesting communication gadget and said application server only in the event that said user and said application server are successfully verified by said verification means.