Abstract: A method of network gateway authenticating involves a network gateway receiving an authentication request from a communications terminal. The communications terminal is in communication with an identity token. The authentication request includes a token cryptogram generated from a cryptographic key stored on the identity token. The network gateway transmits the authentication request to a communications network, and receives an authentication response from the communications network in accordance with a validity of the token cryptogram. The authentication response includes a gateway authentication certificate. The gateway authentication certificate is configured to authenticate the network gateway to a network device of the communications network.

Abstract: A method of completing a transaction with a payment terminal involves the payment terminal transmitting to a network gateway via a first communications network a transaction proposal identifying a proposed transaction with a network device, and receiving from the network gateway a transaction proposal response in response to the transaction proposal. The transaction proposal response specifies a pointer to the proposed transaction. The network gateway is configured to authenticate to the network device via a second communications network that comprises the network device. The payment terminal transmits over a payment network, distinct from the communications networks, payment particulars for the proposed transaction, and receives from the payment network a payment confirmation in response to the payment particulars.

Abstract: A method of authenticating a payment terminal, involves the terminal generating a terminal activation request from a private encryption key and from at least one terminal credential that is uniquely associated with the terminal. The terminal activation request includes a public encryption key. The public encryption key and the private encryption key comprise an asymmetric encryption key pair. The terminal transmits the terminal activation request to a certificate server, and receives an activation response from the certificate server in response. The activation response includes a digital authentication certificate that includes the public encryption key. The terminal authenticates to a computer server, that is distinct from the certificate server, using the digital authentication certificate.

Abstract: A method of network gateway authenticating involves a network gateway receiving an authentication request from a communications terminal. The communications terminal is in communication with an identity token. The authentication request includes a token cryptogram generated from a cryptographic key stored on the identity token. The network gateway transmits the authentication request to a communications network, and receives an authentication response from the communications network in accordance with a validity of the token cryptogram. The authentication response includes a gateway authentication certificate. The gateway authentication certificate is configured to authenticate the network gateway to a network device of the communications network.

Abstract: A method of completing a transaction with a payment terminal involves the payment terminal transmitting to a network gateway via a first communications network a transaction proposal identifying a proposed transaction with a network device, and receiving from the network gateway a transaction proposal response in response to the transaction proposal. The transaction proposal response specifies a pointer to the proposed transaction. The network gateway is configured to authenticate to the network device via a second communications network that comprises the network device. The payment terminal transmits over a payment network, distinct from the communications networks, payment particulars for the proposed transaction, and receives from the payment network a payment confirmation in response to the payment particulars.