Patent ID: 7450554

Claim:
A method for establishment of a service tunnel in a Wireless Local Area Network (WLAN), comprising: (A) a service authentication authorization unit making authentication and authorization to a WLAN user terminal which requests a service and then judging whether the authentication and authorization is successful, and if successful, generating service authorization information including a shared communication key used for communication between the WLAN user terminal and a destination Packet Data Gateway (PDG), and otherwise, ending the current procedure of tunnel establishment; (B) the service authentication authorization unit sending to the PDG the service authorization information that includes the shared communication key; and, (C) the PDG, based on the shared communication key in the service authorization information, establishing a trust relation with the WLAN user terminal through negotiation, and if establishment of the trust relation is successful, the destination PDG allocating tunnel resources for the WLAN user terminal, negotiating parameters and completing the establishment of the tunnel, and otherwise, ending the current tunnel establishment procedure.