Control-plane and user-plane trusted non-3gpp gateway function

A method performed by a security gateway, comprising:

• receiving, from a trusted non-3GPP gateway function control plane entity (TNGF-CP) a first request message comprising a security key, a user equipment (UE) identity, and a signaling message destination associated with the UE, the signaling message destination comprising an internet protocol (IP) address and port indicating where the UE is to send signaling messages;
• transmitting, to the TNGF-CP, a first response message comprising a network address of security gateway;
• receiving, from the UE and via the network address of security gateway, a second request message for establishing a secure connection with the UE using the security key;
• and
• transmitting, to the UE, a second response message comprising the signaling message destination in response to authenticating the UE.

A processor of a security gateway for wireless communication, comprising:

• at least one controller coupled with at least one memory and configured to cause the processor to:
• receive, from a trusted non-3GPP gateway function control plane entity (TNGF-CP) a first request message comprising a security key, a user equipment (UE) identity, and a signaling message destination associated with the UE, the signaling message destination comprising an internet protocol (IP) address and port indicating where the UE is to send signaling messages;
• transmit, to the TNGF-CP, a first response message comprising a network address of security gateway;
• receive, from the UE and via the network address of security gateway, a second request message for establishing a secure connection with the UE using the security key;
• and
• transmit, to the UE, a second response message comprising the signaling message destination in response to authenticating the UE.