A method for establishing a trusted connection on a mobile computing device, comprising: generating a shared secret, wherein the shared secret is generated in a trusted partition of a trusted platform of the mobile computing device and comprises a concatenation of a high-entropy random number, a key derived from a specific measure of a platform state of the trusted platform, a key that anonymously represents an identity of the trusted platform, and a time/date stamp; transporting the shared secret to a mobile communications application in the trusted partition of the mobile computing device; transporting the shared secret to a secure channel application in the trusted partition of the mobile computing device, the secure channel application being operable to establish a secure local communication channel between the trusted partition and a SIM (subscriber identity module)/Smartcard of the mobile computing device; transmitting, with the mobile communications application, the shared secret over a mobile communication network to a mobile service provider, the mobile service provider operating the mobile communication network on which the mobile computing device operates; receiving, over the mobile communication network, the shared secret from the mobile service provider subsequent to transmitting the shared secret to the mobile service provider, wherein the shared secret is received directly into the SIM/Smartcard without receiving the shared secret into the SIM/Smartcard directly from the trusted partition; providing the shared secret to a secure channel applet in the SIM/Smartcard so that the secure channel application in the trusted partition and the secure channel applet in the SIM/Smartcard have the same shared secret; and establishing, with the secure channel application and the secure channel applet, the local communication channel between the SIM/Smartcard and the trusted partition of the mobile computing device. generating a shared secret, wherein the shared secret is generated in a trusted partition of a trusted platform of the mobile computing device and comprises a concatenation of a high-entropy random number, a key derived from a specific measure of a platform state of the trusted platform, a key that anonymously represents an identity of the trusted platform, and a time/date stamp; transporting the shared secret to a mobile communications application in the trusted partition of the mobile computing device; transporting the shared secret to a secure channel application in the trusted partition of the mobile computing device, the secure channel application being operable to establish a secure local communication channel between the trusted partition and a SIM (subscriber identity module)/Smartcard of the mobile computing device; transmitting, with the mobile communications application, the shared secret over a mobile communication network to a mobile service provider, the mobile service provider operating the mobile communication network on which the mobile computing device operates; receiving, over the mobile communication network, the shared secret from the mobile service provider subsequent to transmitting the shared secret to the mobile service provider, wherein the shared secret is received directly into the SIM/Smartcard without receiving the shared secret into the SIM/Smartcard directly from the trusted partition; providing the shared secret to a secure channel applet in the SIM/Smartcard so that the secure channel application in the trusted partition and the secure channel applet in the SIM/Smartcard have the same shared secret; and establishing, with the secure channel application and the secure channel applet, the local communication channel between the SIM/Smartcard and the trusted partition of the mobile computing device.