Patent ID: 8572708

Claim:
A method for authenticating a user equipment (UE), operative in a domain of telecommunication providing support for a federated single sign on infrastructure (FSSO) and an authentication and bootstrapping infrastructure (AA/BA), for access to service provider (SP) comprising: in the domain of telecommunication an integrated proxy (IAP), initially set in a state to support AA/BA infrastructure, intercepting a service request by UE thereby initiating bootstrapping at a Bootstrapping Identity Authentication and Session Infrastructure (BIAS) according to the AA/BA infrastructure whereby UE and BIAS generates at least a shared key Ks and associated temporary identity B_TID and whereby further BIAS provides UE with B_TID; UE providing B_TID to the integrated proxy IAP for authentication according to the AA/BA architecture; the integrated proxy IAP, in response to determining if the service provider SP is external to the domain of telecommunication changes state to act as a FSSO-proxy; the integrated proxy IAP acting as an intermediary between UE and SP whereby, if the SP is within the domain of telecommunication, SP accepts said authentication for service access and whereby, if SP is external, SP requests the integrated proxy IAP to initiate authentication according to the FSSO-architecture.