Key Management in a Communication Network

A method of key management at an originating device for use in a communication network, the method comprising:

• sending from the originating device to a Key Management Server a request for a user key and a token associated with a user identity;
• receiving at the originating device the user key and the token from the Key Management Server;
• sending a request to establish communication from the originating device to a terminating device associated with the user identity, the request including the token;
• receiving a modifying parameter at the originating device from the terminating device;
• using the modifying parameter and the user key at the originating device to generate a terminating device key;
• and
• using the terminating device for authentication or secure communication with the originating device.

A method of key management at a terminating device for use in a communication network, the method comprising:

• receiving at the terminating device from an originating device a request to establish communication, the request including a token associated with a receiving user identity;
• sending the token from the terminating device to a Key Management Server;
• receiving at the terminating device from the Key Management Server a terminating device key;
• and
• using the terminating device key for authentication or secure communication with the originating device.