Embodiments of the invention provide an end-to-end authentication protocol for M2M authentication server and M2M devices, where the M2M authentication server and M2M devices mutually authenticate each other directly. The assumption of trusted M2M gateway is not required. The use of group authentication and group identifier is obviated. Further, the mutual authentication protocol employs symmetric key based techniques.
