A method of controlling a network entity (4, 4) of a
mobile communication network and a
mobile station (1) is described, as well as a corresponding
mobile station and network entity. The network entity (4, 5) and the
mobile station (1) are arranged to conduct a plurality of predetermined message exchange procedures in the course of which predetermined messages are exchanged between said network entity (4, 5) and said mobile
station (1) depending on the given procedure. The predetermined messages may be encrypted, an encrypted message being any message of which at least a part is encrypted. The network entity (4, 5) and the mobile
station (1) are furthermore arranged to conduct one or more
encryption key generation procedures in parallel during which the network entity (4, 5) and the mobile
station (1) generate and store respective corresponding
encryption keys, in order to be able to encrypt and decrypt exchanged messages. The method comprises a step of determining (S21) whether a received message from the mobile station is encrypted. If the received message is encrypted, it is determined (S22) whether a correct
encryption key for decrypting said message is available to said network entity (4, 5), and if no correct key is available, a predetermined triggering message is sent to said mobile station (1). The mobile station (1) then interrupts (S33) the procedure in the course of which it sent the encrypted message for which the network entity (4, 5) did not have a correct key, and initiates (S34) an encryption
key generation procedure.