METHOD FOR ESTABLISHING DATA SECURITY CHANNEL FOR TUNNEL

摘要

Provided are a method for establishing a security data channel for an S2c tunnel, an authentication authorization device and a gateway device. The method includes: sending an authentication authorization request message to an authentication authorization device, and receiving an authentication authorization response message sent by the authentication authorization device, wherein the authentication authorization response message includes a trustable relationship cell for indicating the trustable relationship currently with access, and establishing an S2c tunnel security alliance according to the trustable relationship currently with access. In the embodiments of the present invention, when the UE accesses the EPS network from the non-3GPP access side via an S2c interface, then the authentication authorization response message sent by the authentication authorization device is received, and a security data channel for an S2c tunnel is established according to the trustable relationship currently accessing the network indicated in the response message above, so that a trustable relationship when the non-3GPP access side accesses the EPS network can be obtained, and it is ensured that an accurate security data channel for the S2c tunnel can be established.