a method and apparatus for managing a session key for allowing a mobile terminal to access a wireless local area network . the invention provides for establishing a first secure channel between an access point and a virtual operator , and suggesting a session key to the virtual operator from the access point . a second secure channel is established between the virtual operator and a user , and the session key is sent to the user via the second secure channel upon successful user authentication . the mobile terminal accesses the wlan using the session key .