5G Application Authorization Using UE Service ID Association
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing 5G mobile communication systems lack efficient methods for application-specific authorization, leading to challenges in associating UE identifiers with specific services and applications, particularly in scenarios where AFs are deployed inside or outside the PLMN, and current authorization frameworks do not adequately support service-specific authorization.
Innovation Solution
A method is introduced that configures a mapping between service-specific identifiers of user equipment (UE) within a wireless network, involving a network function entity and application server to authenticate and verify UE identities, establishing a secured channel for service access requests, and utilizing an OAuth server or authorization server to manage and maintain UE identifier associations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If existing 5G authorization frameworks are used, then network access is provided, but application-specific authorization is not efficiently supported
Solution Approach 1:
The patent segments the authorization process into application-specific authorization modules that can be independently configured and managed. This allows different applications to have dedicated authorization policies without affecting the overall system, thereby improving adaptability while maintaining manageable complexity through modular design.
Solution Approach 2:
The patent introduces an application function entity that acts as an intermediary between the network and applications. This intermediary manages the mapping between UE identifiers and application identifiers, enabling application-specific authorization without requiring complex changes to the core network architecture.
2Adaptability or versatility
If UE identifiers are associated with specific services, then service-specific authorization is enabled, but privacy preservation becomes challenging
Solution Approach 1:
The application function entity serves as a privacy-protecting intermediary that handles the association between UE identifiers and application identifiers. It enables service-specific authorization by managing these mappings without exposing sensitive identifier relationships to the applications themselves, thus preserving user privacy while enabling granular authorization control.
3Adaptability or versatility
If AFs are deployed outside PLMN, then network flexibility is improved, but authorization management becomes more difficult
Solution Approach 1:
The patent creates a universal authorization management mechanism through the application function entity that works regardless of whether AFs are deployed inside or outside the PLMN. This universal approach allows the same authorization framework to handle diverse deployment scenarios, improving ease of operation while maintaining deployment flexibility.
Data Source
AI summary
The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. Accordingly, embodiments herein disclose a method performed by an application function (AF) server, the method comprises receiving, from a terminal, a first request message including an user equipment (UE) service identifier (ID), transmitting, to an authorization server, a second request message for request association information of the terminal, the second request message including a terminal ID, receiving, from the authorization server, the association information of the terminal, in case that the association information is retrieved based on the terminal ID and performing to verify whether the UE service ID is associated with the terminal ID in the association information of the terminal.