Identifiers in a communication system

1. A method comprising:

receiving an identifier containing at least one encrypted part at a first network entity from a communication device only when the communication device does not have a valid decryption identifier with a valid validity period;

determining a second network entity based on the identifier;

requesting assistance in decryption of the identifier by the second network entity configured as a mobility arrangement entity comprising memory and a processor of the first network entity from the second network entity;

receiving from the second network entity a decrypted identifier and a decryption identifier based at least in part on a determination by the second network entity based on information stored in a data storage of the second network entity; and

authenticating the communication device to enable two-way communication based on the identifier to enable mobile communication between parties.

2. The method of claim 1 , wherein the decryption identifier comprises at least one of a public key, a secret key, and a key identifier.

3. The method of claim 2 , wherein the key identifier comprises one of an international mobile subscriber identity and an international mobile equipment identity.

4. The method of claim 1 , wherein the first network entity is part of a roaming network and the second network entity is part of a subscriber's network.

5. The method of claim 4 , wherein the identifier containing at least one encrypted part is received from a subscriber.

6. The method of claim 1 , further comprising storing in a data storage the at least one of the decrypted identifier and the decryption identifier.

7. The method of claim 1 , wherein the first network entity determines the second network entity by analyzing at least ore of network specific information, a mobile country code, and a mobile network code.

8. The method of claim 2 , wherein the public key, the secret key, and the key identifier are operator specific.