Patent ID: 8856509

Claim:
A method of authentication and secure communication establishment between a first server and a device over a communication system, comprising: a second server performing a first authentication process with the device including a device authentication using a set of device credentials and a subscriber authentication using at least one subscriber credential, a secure tunnel being established with the device based on the device authentication and being used to perform the subscriber authentication, the first authentication process including creation of a set of at least one authentication evidence at the device and the second server, wherein the first server performs a second authentication process and a secure tunnel establishment protocol with the device, the set of at least one authentication evidence created during the first authentication process being used as a factor in the second authentication process, wherein the set of at least one authentication evidence is provided by the second server to the first server through a communication exchange on at least one of the conditions of the first server requesting for authentication evidence when needed and the second server proactively providing the at least one authentication evidence.