A method, comprising: establishing a multi-link security association between a transmitter upper media access control logic entity of a transmitter and a receiver upper MAC logic entity of a receiver, the transmitter including a first transmitter link and a second transmitter link, the receiver including a first receiver link and a second receiver link, characterized in that the transmitter upper MAC logic entity is associated with a first service set identifier (SSID); and that the method comprises instantiating a second transmitter upper MAC logic entity for a second SSID; associating the first transmitter link with the first receiver link at a lower MAC level; and associating the second transmitter link with the second receiver link at the lower MAC level; wherein an output of establishing the multi-link security association between the transmitter upper MAC logic entity and the receiver upper MAC logic entity comprises a mutually derived pairwise master key, and wherein the first transmitter link is associated with the first receiver link at the lower MAC level with a Pairwise Transient Key Security Association (PTKSA) that is created using a four-way key exchange using the PMK, a first transmitter link nonce, a first receiver link nonce, a first transmitter link address, and a first receiver link address. establishing a multi-link security association between a transmitter upper media access control logic entity of a transmitter and a receiver upper MAC logic entity of a receiver, the transmitter including a first transmitter link and a second transmitter link, the receiver including a first receiver link and a second receiver link, characterized in that the transmitter upper MAC logic entity is associated with a first service set identifier (SSID); and that the method comprises instantiating a second transmitter upper MAC logic entity for a second SSID; associating the first transmitter link with the first receiver link at a lower MAC level; and associating the second transmitter link with the second receiver link at the lower MAC level; wherein an output of establishing the multi-link security association between the transmitter upper MAC logic entity and the receiver upper MAC logic entity comprises a mutually derived pairwise master key, and wherein the first transmitter link is associated with the first receiver link at the lower MAC level with a Pairwise Transient Key Security Association (PTKSA) that is created using a four-way key exchange using the PMK, a first transmitter link nonce, a first receiver link nonce, a first transmitter link address, and a first receiver link address. instantiating a second transmitter upper MAC logic entity for a second SSID; associating the first transmitter link with the first receiver link at a lower MAC level; and associating the second transmitter link with the second receiver link at the lower MAC level; wherein an output of establishing the multi-link security association between the transmitter upper MAC logic entity and the receiver upper MAC logic entity comprises a mutually derived pairwise master key, and wherein the first transmitter link is associated with the first receiver link at the lower MAC level with a Pairwise Transient Key Security Association (PTKSA) that is created using a four-way key exchange using the PMK, a first transmitter link nonce, a first receiver link nonce, a first transmitter link address, and a first receiver link address.