Patent ID: 8621595

Claim:
A method of network gateway authenticating, comprising: a network gateway receiving an authentication request from a communications terminal, the communications terminal being in communication with an identity token, the authentication request including a credential and further including a token cryptogram generated on the identity token from a cryptographic key stored on the identity token; the network gateway transmitting the authentication request to a network device of a communications network; the network gateway receiving an authentication response from the communications network in response to a validity of the token cryptogram, the authentication response including a gateway authentication certificate, the gateway authentication certificate being configured to authenticate the network gateway to the network device of the communications network; the network gateway associating the gateway authentication certificate with the credential; and the network gateway receiving a validation request from the communications terminal, and facilitating authentication of the communications terminal to the network device via the gateway authentication certificate and the validation request, wherein the facilitating the authentication of the communications terminal comprises the network gateway using the validation request to locate the gateway authentication certificate associated with the credential, using the located gateway authentication certificate to establish an encrypted connection with the communications network, and transmitting the validation request to the communications network over the encrypted connection.