5GMS Application Authorization Tokens for Dynamic Policy Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The challenge in 5G networks is determining whether a requesting UE application is authorized to activate a particular dynamic policy, specifically in the context of 5GMS, is the lack of a unified policy, specifically in the context of 5G networks, is the lack of a clear method to authenticate and authorize UE applications attempting to invoke dynamic policies, such as QoS or charging-related policies, which can lead to unauthorized resource usage and violations of service level agreements.
Innovation Solution
Implementing a mechanism where a 5GMS AF performs authorization checking with the ASP using authorization tokens, either through a callback mechanism or pre-provisioned tokens, to ensure that UE applications are authorized to activate policies within the bounds of service level agreements, preventing unauthorized resource usage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authorization checking mechanism is implemented, then network resource security is improved, but system complexity increases
Solution Approach 1:
The patent implements pre-provisioned authorization tokens that are configured in advance in the 5GMS client and 5GMS application function. These tokens contain authorization information that is validated before dynamic policy activation, eliminating the need for real-time complex authorization checks and reducing system complexity while maintaining security.
Solution Approach 2:
The patent introduces authorization tokens as an intermediary mechanism between the UE application and the network resources. The tokens serve as a mediator that carries authorization information, allowing the 5GMS AF to verify application permissions without direct complex interaction with the ASP, thus simplifying the authorization process while ensuring security.
2Reliability
If per-application authentication is implemented, then service level agreement compliance is improved, but processing time increases
Solution Approach 1:
The patent performs authentication and authorization checks in advance by pre-provisioning tokens with validity durations and authorization scopes. When a UE application requests dynamic policy activation, the pre-configured tokens are quickly validated against the service level agreements, significantly reducing processing time compared to real-time authentication while ensuring SLA compliance.
Solution Approach 2:
The patent implements dynamic policy activation where the authorization tokens can be configured with different validity durations and scopes. The 5GMS AF dynamically validates these tokens against current service level agreements, allowing flexible time-based authorization that balances security compliance with processing efficiency.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
The application relates to method for a 5G Media Streaming, 5GMS, Aware Application, AA, hosted by a user equipment, UE, operating in a communication network, the method comprising the step of obtaining, from an application service provider, ASP, associated with the 5GMS AA, a token indicating that the 5GMS AA is authorized to invoke or activate a dynamic policy for resources of the communication network, wherein the dynamic policy is associated with the ASP; and the step of sending the token to a 5GMS client hosted by the UE, wherein the 5GMS client is associated with a 5GMS application function, AF, of the communication network.