Method and apparatus for establishing tunnel data security channel

A gateway device, comprising:

• a transmitter configured to send an authentication request message to an authentication device;
• a receiver configured to receive an authentication request response message sent by the authentication device, wherein the authentication request response message comprises a trust relationship information element indicating whether a user equipment (UE) accesses an Evolved Packet Core (EPC) network via a trusted non-3GPP access network or not;
• and
• a processor coupled to the transmitter and the receiver and configured to:
• determine whether to establish a child security association (Child SA) with the UE based on the trust relationship information element comprised in the authentication request response message received by the receiver.