System and method for authenticating a network gateway

A network gateway, comprising:

• a gateway authenticator configured to communicate with a communications terminal and to (i) receive an authentication request from the communications terminal, the authentication request including a token cryptogram generated on an identity token interfaced with the communications terminal from a cryptographic key stored on the identity token, (ii) transmit the authentication request to a network device of a communications network, and (iii) receive an authentication response from the communications network in response to a validity of the token cryptogram, the authentication response including a gateway authentication certificate, the gateway authentication certificate being configured to authenticate the network gateway to the network device of the communications network.

An authentication network, comprising:

• a communications terminal including a token interface for interfacing an identity token with the communications terminal;
• and
• a network gateway in communication with the communications terminal, the network gateway being configured to (i) receive an authentication request from the communications terminal, the authentication request including a token cryptogram generated on the identity token from a cryptographic key stored on the identity token, (ii) transmit the authentication request to a network device of a communications network, and (iii) receive an authentication response from the communications network in response to a validity of the token cryptogram, the authentication response including a gateway authentication certificate, the gateway authentication certificate being configured to authenticate the network gateway to the network device of the communications network.