Section: 7A.2.3 Key hierarchy for trusted non-3GPP access
Content: The key hierarchy described in clause 6.2.1 applies, with the following changes: The key derived for non-3GPP access is called KTNGF in the context of trusted access. The key KTNGF received from AMF is used for two different purposes; to setup IPSec SAs between the UE and the TNGF and to create WLAN keys between the UE and the TNAP. To separate the keys for these purposes, the key hierarchy in Figure 7A.2.3-1 shall be used. The KTIPSec key is used to setup IPSec SAs and the KTNAP key is used to setup access security. The keys KTIPSec and KTNAP are derived as described in Clause A.22. Figure 7A.2.3-1 Key hierarchy for trusted non-3GPP access