A method of wireless communication in a system comprising a wireless communication device, a network device, and a key generator from which a decryption key, K', and an encryption key, K, can be generated, the method comprising: obtaining, at the wireless communication device, a public key, sP, from the key generator, said public key generated based on a private key, s, of the key generator and a public parameter, P; deriving, at the wireless communication device, the encryption key, K, utilising the public key, sP, an identifier, ID, of the network device, and a random number, r, wherein the derived encryption key, K, is equivalent to the decryption key, K', based on pairing based cryptography, said decryption key, K', using a private key, sID, and a parameter, rP, said private key, sID, based on the private key, s, of the key generator and the identifier, ID, of the network device; generating, at the wireless communication device, a secured query message comprising a message, M, encrypted using the derived encryption key, K, and the parameter, rP, wherein the parameter, rP, is based on the random number, r, and the public parameter, P, the secured query message generated prior to performing an authentication and key agreement, AKA, with the network device; transmitting, at the wireless communication device, the secured query message to the network device for decryption using the decryption key K'; receiving, at the network device, the secured query message from the wireless communication device; obtaining, at the network device, a private key, sID, from the key generator, said private key generated based on the private key, s, of the key generator and the identifier, ID, of the network device; deriving, at the network device, a decryption key, K', using the obtained private key, sID, and the parameter, rP, from said received secured query message, wherein said derived decryption key is equivalent to the encryption key used to encrypt said received secured query message based on pairing based cryptography; decrypting, at the network device, said secured query message using said derived decryption key; generating, at the network device, in response to receiving the secured query message, a secured response message based at least in part on a network security credential of the network device; transmitting, at the network device, the secured response message to the wireless communication device; receiving, at the wireless communication device, the secured response message to the secured query message; and determining, at the wireless communication device, whether to perform the AKA with the network device based at least in part on the received secured response message. obtaining, at the wireless communication device, a public key, sP, from the key generator, said public key generated based on a private key, s, of the key generator and a public parameter, P; deriving, at the wireless communication device, the encryption key, K, utilising the public key, sP, an identifier, ID, of the network device, and a random number, r, wherein the derived encryption key, K, is equivalent to the decryption key, K', based on pairing based cryptography, said decryption key, K', using a private key, sID, and a parameter, rP, said private key, sID, based on the private key, s, of the key generator and the identifier, ID, of the network device; generating, at the wireless communication device, a secured query message comprising a message, M, encrypted using the derived encryption key, K, and the parameter, rP, wherein the parameter, rP, is based on the random number, r, and the public parameter, P, the secured query message generated prior to performing an authentication and key agreement, AKA, with the network device; transmitting, at the wireless communication device, the secured query message to the network device for decryption using the decryption key K'; receiving, at the network device, the secured query message from the wireless communication device; obtaining, at the network device, a private key, sID, from the key generator, said private key generated based on the private key, s, of the key generator and the identifier, ID, of the network device; deriving, at the network device, a decryption key, K', using the obtained private key, sID, and the parameter, rP, from said received secured query message, wherein said derived decryption key is equivalent to the encryption key used to encrypt said received secured query message based on pairing based cryptography; decrypting, at the network device, said secured query message using said derived decryption key; generating, at the network device, in response to receiving the secured query message, a secured response message based at least in part on a network security credential of the network device; transmitting, at the network device, the secured response message to the wireless communication device; receiving, at the wireless communication device, the secured response message to the secured query message; and determining, at the wireless communication device, whether to perform the AKA with the network device based at least in part on the received secured response message.