Method and device for applying user plane security policy for pdu session in wireless communication system

A session management function (SMF) configured to manage a protocol data unit (PDU) session for a user equipment (UE) in a wireless communication system, the SMF comprising:

• a transceiver;
• and
• a processor configured to:
• receive, through the transceiver, first configuration information about a first user plane security policy of the UE from a unified data management (UDM) configured to manage subscription information about the UE,
• receive, through the transceiver, second configuration information about a second user plane security policy to be applied to a specific service data flow from a policy and control function (PCF) configured to manage a policy and charging control (PCC) rule, and
• determine a user plane security policy to be applied to the UE based on one selected from the first user plane security policy and the second user plane security policy according to priority.

A method for determining a user plane security policy for a protocol data unit (PDU) session of a user equipment (UE) in a wireless communication system, the method comprising:

• creating, by a policy and control function (PCF) managing a policy and charging control (PCC) rule, configuration information including information about a priority for a user plane security policy to be applied to a specific service data flow;
• and
• transmitting, by the PCF, the configuration information including the information about the priority to a session management function (SMF) managing the PDU session for the UE,
• wherein the user plane security policy to be applied to the PDU session of the UE is determined based on the priority.

A policy and control function (PCF) managing a policy and charging control (PCC) rule in a wireless communication system, the PCF comprising:

• a transceiver;
• and
• a processor configured to:
• create configuration information including information about a priority for a user plane security policy to be applied to a specific service data flow, and
• transmit, through the transceiver, the configuration information including the information about the priority to a session management function (SMF) managing a protocol data unit (PDU) session for a user equipment (UE),
• wherein a user plane security policy to be applied to the PDU session of the UE is determined based on the priority.