SQL Server trusted connection additional security
The feature designed to help in this scenario is Application Roles.  With an Application Role you can allow the user to connect to the target database, but not be able to run any queries until the application supplies a secret to activate the Application Role.