A method of operating a remote communication device, the method comprising: fetching an address of an Application Function node (AF-1) associated with the remote communication device from a Direct Discovery Name Management Function, DDNMF, node associated with the remote communication device; transmitting a key request message for discovery to the Application Function node (AF-1) associated with the remote communication device based on the address of the Application Function node (AF-1) associated with the remote communication device, the key request message for discovery including a relay service code; receiving a key response message for discovery including a discovery key from the Application Function node (AF-1) associated with the remote communication device, the key response message for discovery being associated with the key request message for discovery; transmitting a key request message for communication to the Application Function node (AF-1) associated with the remote communication device based on the address of the Application Function node (AF-1) associated with the remote communication device, the key request message for communication including the relay service code; receiving a key response message for communication including a communication key and a key identifier, ID, for the communication key, the key response message for communication being associated with the key request message for communication; discovering a relay communication device, wherein discovering the relay communication device includes receiving an encrypted discovery message from the relay communication device and decrypting the encrypted discovery message using the discovery key; transmitting a direct communication request to the relay communication device responsive to receiving and decrypting the encrypted discovery message from the relay communication device, wherein the direct communication request includes the key ID for the communication key; and receiving an encrypted direct communication response from the relay communication device, wherein receiving the encrypted direct communication response includes decrypting the encrypted direct communication response. fetching an address of an Application Function node (AF-1) associated with the remote communication device from a Direct Discovery Name Management Function, DDNMF, node associated with the remote communication device; transmitting a key request message for discovery to the Application Function node (AF-1) associated with the remote communication device based on the address of the Application Function node (AF-1) associated with the remote communication device, the key request message for discovery including a relay service code; receiving a key response message for discovery including a discovery key from the Application Function node (AF-1) associated with the remote communication device, the key response message for discovery being associated with the key request message for discovery; transmitting a key request message for communication to the Application Function node (AF-1) associated with the remote communication device based on the address of the Application Function node (AF-1) associated with the remote communication device, the key request message for communication including the relay service code; receiving a key response message for communication including a communication key and a key identifier, ID, for the communication key, the key response message for communication being associated with the key request message for communication; discovering a relay communication device, wherein discovering the relay communication device includes receiving an encrypted discovery message from the relay communication device and decrypting the encrypted discovery message using the discovery key; transmitting a direct communication request to the relay communication device responsive to receiving and decrypting the encrypted discovery message from the relay communication device, wherein the direct communication request includes the key ID for the communication key; and receiving an encrypted direct communication response from the relay communication device, wherein receiving the encrypted direct communication response includes decrypting the encrypted direct communication response.