FIELD: information technology.
SUBSTANCE: first and second encryption-protected connections are established for transmitting first-type packets from a secure gateway to a mobile station and from the mobile station to the secure gateway, respectively. Further, first and second secure connections with zero encryption are established for transmitting second-type packets from a secure gateway to a mobile station and from the mobile station to the secure gateway, respectively. Second-type packets are selected for transmission using the second secure connection with zero encryption based on a traffic selector which is created by the mobile station or secure gateway after establishing the first and second encryption-protected connections.
EFFECT: high flexibility of making decisions on security policies during operation of a wireless local area network.
21 cl, 4 dwg
