User plane security management in a communication system

Apparatus comprising:

• at least one processor coupled to a memory associated with user equipment configured to:
• invoke one or more application programs, wherein at least one of the one or more application programs is configured with application layer security between the user equipment and a data network;
• and
• sending a data session request from the user equipment to a communication network, wherein the communication network is configured to connect the user equipment to the data network in association with the at least one application program, and wherein the data session request comprises an indication that application layer security between the user equipment and the data network is active for the at least one application program.

A method comprising:

• receiving at a network entity of a communication network a data session request sent from user equipment, wherein the communication network is configured to connect the user equipment to a data network in association with one or more application programs invoked by the user equipment, and wherein the data session request comprises an indication that application layer security between the user equipment and the data network is active for the at least one application program;
• and
• sending from the network entity to the user equipment a configuration message indicating a level of communication network level security to be applied;
• wherein the network entity comprises at least one processing device configured to execute the invoking and sending steps.

Apparatus comprising:

• at least one processor coupled to a memory associated with a network entity of a communication network configured to:
• receive a data session request sent from user equipment, wherein the communication network is configured to connect the user equipment to a data network in association with one or more application programs invoked by the user equipment, and wherein the data session request comprises an indication that application layer security between the user equipment and the data network is active for the at least one application program;
• and
• send a configuration message indicating a level of communication network level security to be applied.