A computer implemented method executed at least in part on a system, for authenticating and controlling access by a mobile agent to customer data stored on the system comprising: receiving by a mobile application management module, a mobile agent login request from an agent device and a customer authentication request from a customer device using a pre-installed mobile application wherein unique identification data of the agent device and the customer device is pre-stored; receiving by a location match module, geo-spatial location of the agent device and the customer device and performing geo-spatial location match for the agent device and the customer device; generating by a session key generator module, a session key which is valid for pre-determined duration of a meeting session and dividing the session key into two parts wherein one part is sent to the agent device and other part to the customer device wherein the session key is generated and sent only if location match is found between the agent device and the customer device; entering the received parts of the session key into the agent device and the customer device by the mobile agent and a customer respectively; retrieving, by a session key verification module, the entered session key by the customer and the mobile agent; comparing by the session key verification module, the entered session key with the generated session key by the session key generator module; comparing by an ID match module, the unique identification data of the agent device and the customer device stored with identification data of the agent device and the customer device used for entering the session key; and granting access by an access module to mobile agent through agent device only if the location match, session key match and identification data match for the agent device and the customer device is found. receiving by a mobile application management module, a mobile agent login request from an agent device and a customer authentication request from a customer device using a pre-installed mobile application wherein unique identification data of the agent device and the customer device is pre-stored; receiving by a location match module, geo-spatial location of the agent device and the customer device and performing geo-spatial location match for the agent device and the customer device; generating by a session key generator module, a session key which is valid for pre-determined duration of a meeting session and dividing the session key into two parts wherein one part is sent to the agent device and other part to the customer device wherein the session key is generated and sent only if location match is found between the agent device and the customer device; entering the received parts of the session key into the agent device and the customer device by the mobile agent and a customer respectively; retrieving, by a session key verification module, the entered session key by the customer and the mobile agent; comparing by the session key verification module, the entered session key with the generated session key by the session key generator module; comparing by an ID match module, the unique identification data of the agent device and the customer device stored with identification data of the agent device and the customer device used for entering the session key; and granting access by an access module to mobile agent through agent device only if the location match, session key match and identification data match for the agent device and the customer device is found.