A technique is provided for receiving, by a MS from a BS a failure notification message indicating a failure of a BS-core network interface, sending, from the MS to the BS, a security agent (SA) notification including a MSID identifying the MS, a service profile identifying one or more services, and one or more user group IDs that identify one or more user groups of which the MS is a member, and receiving, by the MS from the BS, a SA configuration message including a service identification identifying at least one of the one or more services, one or more user group IDs identifying one or more user groups for which the MS has been configured as a security agent to perform the identified service, and a BS access key to allow one or more other MSs to access or establish a connection with the BS.