A key generation and distribution method for an authentication framework for an operator provider network and a service provider network comprising: receiving a first request from a first requestor, wherein the first requestor is a network authentication entity residing at the operator provider network, the first request comprising an identity of the first requestor; generating a new identity, ID, based on the identity of the first requestor; generating a secret key based on an Identity Based Cryptography, IBC, key generation algorithm for the new ID with a pair of global keys, namely Global Secret Key, GSK, Global Public Key, GPK; transmitting the new ID, secret key and the GPK to the first requestor; receiving a request from a second requestor, wherein the second requestor is a Service Identity Management, IDM, entity residing at the service provider network, the request comprising a plurality of physical identities extracted from devices of the second requestor; generating a new ID for each of the plurality of physical identities; generating a secret key based on the IBC key generation algorithm for each of the plurality of new IDs; and transmitting the plurality of new IDs, secret keys corresponding to each of the plurality of physical IDs and the GPK to the second requestor; and transmitting, by the second requestor, new IDs and secret keys to the devices of the second requestor and an authentication server of the service provider network; and performing mutual authentication between the devices of the second requestor and one of the network authentication entity residing at the operator provider network and the authentication server of the service provider network, wherein the step of generating the secret key based on the IBC key generation algorithm for each of the plurality of new IDs comprises: determining the pair of global keys from a plurality of pairs of global keys, and generating the secret key for the new ID with the determined pair of global keys, wherein a quota is provided to limit the number of the plurality of new IDs and the corresponding secret keys that can be generated by the Service IDM entity, wherein the step of generating the secret key based on the IBC key generation algorithm for each of the plurality of new IDs further comprises: repeating the steps of determining the pair of global keys from the plurality of pairs of global keys to determine a next pair of global keys from the plurality of pairs of global keys, and generating another secret key for each of the plurality of new IDs to obtain a plurality of secret keys for each of the plurality of new IDs. receiving a first request from a first requestor, wherein the first requestor is a network authentication entity residing at the operator provider network, the first request comprising an identity of the first requestor; generating a new identity, ID, based on the identity of the first requestor; generating a secret key based on an Identity Based Cryptography, IBC, key generation algorithm for the new ID with a pair of global keys, namely Global Secret Key, GSK, Global Public Key, GPK; transmitting the new ID, secret key and the GPK to the first requestor; receiving a request from a second requestor, wherein the second requestor is a Service Identity Management, IDM, entity residing at the service provider network, the request comprising a plurality of physical identities extracted from devices of the second requestor; generating a new ID for each of the plurality of physical identities; generating a secret key based on the IBC key generation algorithm for each of the plurality of new IDs; and transmitting the plurality of new IDs, secret keys corresponding to each of the plurality of physical IDs and the GPK to the second requestor; and transmitting, by the second requestor, new IDs and secret keys to the devices of the second requestor and an authentication server of the service provider network; and performing mutual authentication between the devices of the second requestor and one of the network authentication entity residing at the operator provider network and the authentication server of the service provider network, wherein the step of generating the secret key based on the IBC key generation algorithm for each of the plurality of new IDs comprises: determining the pair of global keys from a plurality of pairs of global keys, and generating the secret key for the new ID with the determined pair of global keys, wherein a quota is provided to limit the number of the plurality of new IDs and the corresponding secret keys that can be generated by the Service IDM entity, wherein the step of generating the secret key based on the IBC key generation algorithm for each of the plurality of new IDs further comprises: determining the pair of global keys from a plurality of pairs of global keys, and generating the secret key for the new ID with the determined pair of global keys, wherein a quota is provided to limit the number of the plurality of new IDs and the corresponding secret keys that can be generated by the Service IDM entity, wherein the step of generating the secret key based on the IBC key generation algorithm for each of the plurality of new IDs further comprises: repeating the steps of determining the pair of global keys from the plurality of pairs of global keys to determine a next pair of global keys from the plurality of pairs of global keys, and generating another secret key for each of the plurality of new IDs to obtain a plurality of secret keys for each of the plurality of new IDs.