Patent ID: 8850545

Claim:
In a system comprising a user equipment (UE), a service provider associated with a cloud-hosted virtual machine, and an identity provider comprising a local identity provider, a method for establishing secure communications between the service provider and the UE, the method comprising: establishing, at the UE, a secure channel between the UE and the service provider; sending, to the identity provider, authentication parameters for performing an authentication of the UE with the identity provider; determining, at the UE, an authentication assertion that indicates a successful authentication of the UE; and verifying, at the UE, that the service provider with which the secure channel has been established is an intended service provider for performing authentication for access to services, wherein the service provider is verified using at least one parameter generated during the establishment of the secure channel, and wherein establishing the secure channel between the UE and the service provider comprises establishing the secure channel between the local identity provider and the service provider associated with the cloud-hosted virtual machine to enable access to services provided by the cloud-hosted virtual machine.