Method and apparatus for establishing tunnel data security channel

摘要

Sending an authentication request message to an authentication device, receiving an authentication response message sent by the authentication device, where the authentication response message includes a trust relationship information element which is used for indicating a trust relationship of a current access, and establishing an S2c tunnel security association according to the trust relationship of the current access. The trust relationship when the non-3GPP access side accesses the EPS network may be obtained, thereby ensuring establishment of a correct S2c tunnel security data channel.

主权项

1. A method for establishing a child security association (Child SA) between a user equipment (UE) and a packet data network (PDN) gateway, comprising:
sending, by the PDN gateway, an authentication request message to an authentication device; receiving, by the PDN gateway, an authentication response message from the authentication device so that the PDN gateway is able to determine whether the UE accesses an Evolved Packet Core (EPC) network via a trusted non-3GPP access network from a trust relationship information element comprised in the authentication response message; and establishing, by the PDN gateway, the Child SA with the UE according to an indication of the trust relationship information element that the UE accesses the EPC network via the trusted non-3GPP access network.