Operator-Assisted Key Establishment

A method for deriving a cryptographic key in an application server, the method comprising:

• obtaining a first key or a derivative of the first key;
• and
• deriving the cryptographic key using the obtained first key or the obtained derivative of the first key and a second key, wherein the cryptographic key is applicable by the server for at least one of decrypting at least a part of data included in an application message for the application server transmitted from a terminal over a network or authenticating the part of data included in the application message, wherein the terminal and the network both have access to the first key, and wherein the terminal and the server both have access to the second key.

A terminal for deriving a cryptographic key, the terminal comprising:

• a processor configured for deriving the cryptographic key using a first key and a second key, wherein the cryptographic key is applicable by the terminal for at least one of encrypting at least a part of data included in an application message for an application server transmitted over a network or authenticating the part of data included in the application message, wherein the terminal and the network both have access to the first key, and wherein the terminal and the server both have access to the second key.

An application server for deriving a cryptographic key, the server comprising:

• a means for obtaining a first key or a derivative of the first key;
• and
• a processor configured for deriving the cryptographic key using the obtained first key or the derivative of the first key and the second key, wherein the cryptographic key is applicable by the server for at least one of decrypting at least a part of data included in an application message for the application server transmitted from a terminal over a network or authenticating the part of data included in the application message, wherein the terminal and the network both have access to a first key, and wherein the terminal and the server both have access to a second key.

(canceled)

(Canceled)