Security of user plane traffic between relay node and radio access network

An apparatus comprising:

• a processor configured to receive a message requesting creation of a dedicated bearer for a type of traffic which is to be transmitted on a data radio bearer to be created between a relay node, which is wirelessly connected to a radio-access network via a donor cell, and a donor node of the donor cell, wherein the message includes a parameter which indicates that the dedicated bearer is required for integrity protection or that the type of traffic is specific type of traffic to be carried by the dedicated bearer, and to include a second parameter in a message requesting setup of a radio access bearer for the type of traffic based on the parameter, wherein the second parameter indicates that the radio access bearer is required for integrity protection or that the type of traffic is specific type of traffic to be carried by the radio access bearer.

A user equipment comprising:

• a processor configured to receive a connection reconfiguration message including an indication that integrity protection is required for a data radio bearer to be created for a specific type of traffic between a relay node, which is wirelessly connected to a radio-access network via a donor cell, and a donor node of the donor cell, wherein the user equipment is relayed by the relay node, and to activate integrity protection for the data radio bearer.

A method comprising:

• determining that a dedicated bearer is to be created for a specific type of traffic which is to be transmitted on a data radio bearer to be created between a relay node, which is wirelessly connected to a radio-access network via a donor cell, and a donor node of the donor cell;
• and
• including a parameter into a message requesting creation of the dedicated bearer, wherein the parameter indicates that the dedicated bearer is required for integrity protection or that the dedicated bearer is used to carry the specific type of traffic.

A method comprising:

• receiving a message requesting creation of a dedicated bearer for a type of traffic which is to be transmitted on a data radio bearer to be created between a relay node, which is wirelessly connected to a radio-access network via a donor cell, and a donor node of the donor cell, wherein the message includes a parameter which indicates that the dedicated bearer is required for integrity protection or that the type of traffic is specific type of traffic to be carried by the dedicated bearer;
• and
• including a second parameter in a message requesting setup of a radio access bearer for the type of traffic based on the parameter, wherein the second parameter indicates that the radio access bearer is required for integrity protection or that the type of traffic is specific type of traffic to be carried by the radio access bearer.

A method for a user equipment, the method comprising:

• receiving a connection reconfiguration message including an indication that integrity protection is required for a data radio bearer to be created for a specific type of traffic between a relay node, which is wirelessly connected to a radio-access network via a donor cell, and a donor node of the donor cell, wherein the user equipment is relayed by the relay node;
• and
• activating integrity protection for the data radio bearer.