PDU session for encrypted traffic detection

An apparatus comprising:

• a transceiver that communicates with a mobile communication network;
• and
• a processor that:
• transmits a request to establish a Packet Data Unit (“PDU”) session with the mobile communication network;
• receives a PDU session establishment response from the mobile communication network, wherein the PDU session establishment response includes a list of one or more application identifiers for which the apparatus is to provide encrypted traffic detection information when an application having an application identifier in the list of one or more application identifiers sends encrypted traffic over the established PDU session;
• calculates encrypted traffic detection information for each application identifier in the list of one or more application identifiers;
• and
• modifies a data packet associated with a start of an encrypted data flow of a first application in the list of one or more application identifiers to include encrypted traffic detection information,
• wherein the transceiver sends the modified data packet to the mobile communication network.