Patent ID: 7775427

Claim:
A method for binding a smartcard having a plurality of credentials to a smartcard reader associated with a secure processor, comprising: (a) registering the smartcard reader with a smartcard issuer server, wherein the registration includes cryptographically authenticating the secure processor to the smartcard issuer server; (b) receiving a first set of private keys associated with a set of credentials stored on the smartcard, one private key per credential, if the authentication of the secure processor was successful; (c) requesting access to a service provided via a service provider server; (d) receiving a request for authentication from the service provider server, wherein the authentication request includes a request for a first credential in the set of credentials; (e) cryptographically authenticating the smartcard reader to the smartcard using the private key associated with the first credential; and (f) receiving the first credential from the smartcard if the authentication of the smartcard reader is successful.