A method comprising: establishing, by a mobile device (215, 310) in a wireless network, an indirect connection of a first device (210, 315) to a node (240, 320) of the wireless network using the mobile device (215, 310) as an intermediate node for wireless transport; and transferring, by the mobile device (215, 310), data over the indirect connection via a first wireless link comprising a direct device connection (270, 317) between the first device and the mobile device and a second wireless link comprising a direct 3GPP (3rd Generation Partnership Project) connection between the mobile device (215, 310) and the wireless network; wherein the indirect connection supports security protection of communications between the node of the wireless network and the first device based at least in part on an active security context maintained within the wireless network for communication via at least one messaging protocol layer with at least the first device (210, 315); wherein a security association for the at least one messaging protocol layer is between the first device (210, 315) and the wireless network, such that signaling and data traffic through the mobile device (215, 310) are protected; wherein the first device (210, 315) and the node of the wireless network (240, 320) share at least one security key (K NAS) usable to protect data for the first device; wherein the security association comprises security protection of an access stratum protocol layer, wherein the mobile device operates as a proxy protocol entity comprising a proxy AS entity; wherein the proxy AS entity communicates with an AS entity in the first device and wherein the AS protocol layer is a radio resource control protocol layer; and wherein the method further comprises multiplexing RRC messages for both the first device (210, 315) and the mobile device (215, 310) over a single wireless RRC connection between the mobile device (215, 310) and the node (240, 320) of the wireless network. establishing, by a mobile device (215, 310) in a wireless network, an indirect connection of a first device (210, 315) to a node (240, 320) of the wireless network using the mobile device (215, 310) as an intermediate node for wireless transport; and transferring, by the mobile device (215, 310), data over the indirect connection via a first wireless link comprising a direct device connection (270, 317) between the first device and the mobile device and a second wireless link comprising a direct 3GPP (3rd Generation Partnership Project) connection between the mobile device (215, 310) and the wireless network; wherein the indirect connection supports security protection of communications between the node of the wireless network and the first device based at least in part on an active security context maintained within the wireless network for communication via at least one messaging protocol layer with at least the first device (210, 315); wherein a security association for the at least one messaging protocol layer is between the first device (210, 315) and the wireless network, such that signaling and data traffic through the mobile device (215, 310) are protected; wherein the first device (210, 315) and the node of the wireless network (240, 320) share at least one security key (K NAS) usable to protect data for the first device; wherein the security association comprises security protection of an access stratum protocol layer, wherein the mobile device operates as a proxy protocol entity comprising a proxy AS entity; wherein the proxy AS entity communicates with an AS entity in the first device and wherein the AS protocol layer is a radio resource control protocol layer; and wherein the method further comprises multiplexing RRC messages for both the first device (210, 315) and the mobile device (215, 310) over a single wireless RRC connection between the mobile device (215, 310) and the node (240, 320) of the wireless network.