API topology hiding method, device and system

Abstract

The embodiment of the invention discloses an API topology hiding method, an API topology hiding device and an API topology hiding system, and relates to the technical field of communication. The invention aims to hide an AEF providing an API for an API calling entity. The method comprises the following steps of receiving a request message by CCF from a topology hiding request entity, wherein the request message comprises a message of the API and is used for requesting hiding of the AEF providing the API; according to the request message, determining a topology hiding entry point for the API calling entity to call the API, and sending an identifier of the API and an identifier of the AEF providing the API to the topology hiding entry point, so that the topology hiding entry point hides theAEF providing the API. The API topology hiding method provided by the embodiment of the invention is suitable for hiding the AEF providing the API.

Description

technical field [0001] The embodiments of the present application relate to the field of communication technologies, and in particular to an application programming interface (Application Programming Interface, API) topology hiding method, device, and system. Background technique [0002] The 3rd Generation Partnership Project (3rd Generation Partnership Project, 3GPP) defines a common application programming interface framework (Common Application Programming Interface Framework, CAPIF), which can include API call entities, common API framework core functions (Common API Framework Core Fuction , CCF), API Exposing Function (API Exposing Function, AEF), API Management Function (APIManagement Function) entities, etc. Among them, AEF can provide one or more APIs. In order to achieve load balancing and access control, AEF in CAPIF can be deployed in cascade, star or other deployment methods. [0003] At present, in CAPIF, the API calling entity usually obtains the information...

AI Technical Summary

Problems solved by technology

[0003] At present, in CAPIF, the API calling entity usually obtains the information of the AEF providing the API from the CCF, and directly accesses the AEF providing the API. During this process, if the information of the AEF providing the API is used by criminals, the providing API The AEF is likely to be maliciously attacked by criminals. The API calling entity usually obtains the information of the AEF that provides the API from the CCF, and directly accesses the AEF that provides the API. In the process, if the information of the AEF that provides the API If exploited by criminals, the AEF that provides the API is likely to be maliciously attacked by the criminals, and a large number of illegal requests will be sent to the AEF that provides the API, causing the software and hardware resources of the AEF to be exhausted and unable to provide normal API calls services, etc., will greatly reduce the system security of CAPIF

Images