Improved security establishment methods and systems

An apparatus arranged to negotiate a procedure to establish a secure link with a first device, the apparatus being arranged:

• to receive a message including an indication on a security establishment procedure (SEP) and/or a security parameter (SP) to use from the first device, said SEP and/or SP being arranged to be used to establish a secure link between the first and a second device, and a indication whether the SEP and/or the SP is an in-coverage SEP and/or in-coverage SP or an out-of-coverage SEP and/or out-of-coverage SP,
• wherein
• the in-coverage SEP and/or the in-coverage SP is used with network assistance and the wherein use of the in-coverage SEP and/or the in-coverage SP relies on a third device to establish the secure link between the first and second devices, wherein the third device is arranged to provide core network assistance, and
• the out-of-coverage SEP and/or the out-of-coverage SP is used without network assistance and wherein the use of the out-of-coverage SEP and/or the out-of-coverage SP allows establishment of the secure link between the first and second devices without relying on the third device,
• and to perform an evaluation of whether the indicated SEP and/or SP can be used.