Method, devices and system for performing key management

A communication device comprising at least one communication unit and a processing unit, wherein:

• the at least one communication unit is configured to perform communication using a first wireless communication technology;
• the at least one communication unit is further configured to establish a first secure connection with a key management service using a second wireless communication technology;
• and
• the processing unit is configured to negotiate, with the key management service using the first secure connection, first authentication information comprising a first authentication bundle for secure communication and/or data protection on the first wireless communication technology,
• wherein negotiating the first authentication information comprises
• obtaining, from the key management service, a first authentication key for the communication device, and/or
• renewing, by the key management service, the first authentication key to the communication device, and/or
• decommissioning, by the key management service, the first authentication key from the communication device.

A communication infrastructure device comprising a first communication unit, a third communication unit and a processing unit, wherein:

• the first communication unit is configured to perform communication using a first wireless communication technology;
• the third communication unit is configured to establish a second secure connection with a key management service using a third communication technology;
• and
• the processing unit is configured to negotiate, with the key management service using the second secure connection, first authentication information comprising a first authentication bundle for secure communication and/or data protection on the first wireless communication technology, and to receive at least a part of first authentication information of at least one communication device, the part of the first authentication information comprising at least a part of the first authentication bundle for secure communication and/or data protection with the at least one communication device on the first wireless communication technology,
• wherein the first authentication information comprises a first authentication key for a first communication device.

One or more tangible, non-transitory, computer-readable media storing instructions that, when executed by at least one communication device configured to perform wireless communication using a first wireless communication technology cause the at least one communication device to perform operations comprising:

• establishing a first secure connection with a key management service using a second wireless communication technology;
• and
• negotiating, with the key management service using the first secure connection, first authentication information comprising a first authentication bundle for secure communication and/or data protection on the first wireless communication technology,
• wherein the negotiating the first authentication information with the key management service comprises
• provisioning, by the key management service, a first authentication key to the at least one communication device, and/or
• renewing, by the key management service, the first authentication key to the at least one communication device, and/or
• decommissioning, by the key management service, the first authentication key from the at least one communication device.