Security settings for user plane data sent over different accesses of a network

A method of operating a core network node, comprising:

• establishing a protocol data unit, PDU, session with a user equipment, UE;
• configuring a first user plane, UP, security policy used in the PDU session that applies to radio bearers set up between the UE and a first radio access network;
• and
• configuring a second UP security policy, that is different from the first UP security policy, used in the PDU session that applies to radio bearers set up between the UE and a second radio access network.

A method of operating a user equipment, UE, in a core network, comprising:

• establishing a protocol data unit, PDU, session with a first radio access network, RAN, wherein the PDU session is associated with a first user plane, UP, security policy;
• configuring the first UP security policy used by a first radio bearer in the PDU session between the UE and a base station in the first RAN, wherein the first radio bearer is subject to the first UP security policy;
• and
• configuring a second UP security policy, that is different from the first UP security policy, used by a second radio bearer in the PDU session between the UE and an interworking function that provides access to the core network through a second RAN, wherein the second radio bearer is subject to the second UP security policy.

A method of operating a user equipment, comprising:

• establishing a protocol data unit, PDU, session with a user plane function, UPF, in a core network, via a first radio access network;
• configuring a first user plane, UP, security policy used in the PDU session that applies to radio bearers set up between the UE and the first radio access network;
• and
• configuring a second UP security policy, that is different from the first UP security policy, used in the PDU session that applies to radio bearers set up between the UE and a second radio access network.