User-type handling in a wireless access network

A method for determining user-type information in a Security Gateway, SEGW, in a wireless access network during a registration procedure for a user, said method comprising the steps of:

• storing in the SEGW, a database associating different International Mobile Station Identities, IMSIs, or IMSI number series with user-type information indicating a specific type of IPsec tunnel based on the user type, wherein different types of IPsec tunnels are associated with different user-types;
• the SEGW receiving the user's IMSI during the registration procedure;
• the SEGW determining user-type information for the user based on the user's IMSI or an associated IMSI number series;
• and
• the SEGW using the determined user-type information for selecting and applying policies associated with the user's user-type to the user-type specific IPsec tunnel.

An Authentication, Authorization and Accounting, AAA, server, for providing a user-type indication to a Security Gateway, SEGW, during a registration procedure for a user, said AAA server configured to perform the following:

• receive a request to authenticate the user;
• and
• send a user-type indication for the user to the SEGW with an authentication success message, wherein the user-type indication indicates a specific type of IPsec tunnel based on the user-type, wherein different types of IPsec tunnels are associated with different user-types, and wherein each user's user-type is determined based on the user's International Mobile Station Identity, IMSI or an associated IMSI number series:
• wherein the SEGW utilizes the received user-type indication for selecting and applying policies associated with the user's user-type to the user-type specific IPsec tunnel indicated through the user-type indication.

A Security Gateway, SEGW, in an access network, said SEGVV is configured to perform the following:

• associate user-type information with different International Mobile Station Identities, IMSIs, or IMSI number series, wherein the user-type information indicates a specific type of IPsec tunnel based on the user type, wherein different types of IPsec tunnels are associated with different user-type;
• receive a user's IMSI during a registration procedure;
• determine user-type information for the user based on the user's IMSI or an associated IMSI number series;
• and
• use the determined user-type information in the SEGW for selecting and applying policies associated with the user's user-type to the user-type specific IPsec tunnel.