Patent ID: 8850553

Claim:
A method for communication between a client and target server, comprising: receiving a clear text client channel binding value and a clear text client service binding value from the client at the target server via a gateway, the clear text client service binding value including a service that the client intends to reach; verifying that the clear text client service binding value was transmitted over one or more valid outer communication channels based on the client channel binding value; comparing the clear text client service binding value to a server service binding value, wherein the clear text client service binding value includes a gateway name that is known to the target server; determining whether the clear text client channel binding value is a non-default value, the non-default value indicating that the client has sent an authentication exchange over a valid outer channel and has verified that the gateway is the intended recipient; comparing the clear text client service binding value to the server service binding value to determine if the client service binding value matches the server service binding value; and forming an authenticated communication channel between the client and the target server when the client service binding value matches the server service binding value, wherein the forming includes forming the authenticated communication channel between the client and the target server when the client service binding value matches the server service binding value and the client channel binding value is a non-default value.