Patent ID: 8307413

Claim:
An assembly comprising: a personal token and a telecommunication terminal ( 20 ) which hosts said personal token ( 10 ), said telecommunication terminal comprising a proxy program which establishes SSL connections to an authentication server on behalf of other programs and to which SSL connection requests from other programs executing on the telecommunication terminal are redirected and including instructions: to request said personal token ( 10 ) to verify a remote authentication server ( 30 ); a built-in SSL implementation to establish an SSL communications channel using a certificate from the personal token without storing the certificate in the telecommunications terminal; to use the built-in SSL implementation to establish an SSL communications channel to the remote authentication server upon successful verification of the remote server by the personal token; to receive a SAML token from the remote authentication server; and to transfer the SAML token to a said other program from which an SSL connection request originated thereby allowing said other program to establish an SSL connection to a remote service provider server; the personal token comprises a processor and storage including: data which is specifically associated with the remote server; instructions to operate the processor of the personal token to receive a server verification request from the proxy program, in response to receiving the server verification request verifying that the server corresponds to an authorized server, in response to successfully verifying the remote server, initiating an SSL connection according to the non-standard SSL protocol by generating a message authenticating said personal token to the remote server and by signing said message with said data so that only the specific remote server can interpret the authenticating message.