Access Token Usage Count in 5G Service Based Architecture
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current technologies lack a mechanism to restrict the usage of access tokens in a service-based architecture (SBA), leading to potential misuse and Denial of Service (DoS) scenarios.
Innovation Solution
Implementing a system where access tokens are associated with a count value indicating the number of times they can be used, allowing network devices to transmit, receive, and manage these tokens to enforce usage limits.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If access tokens are cached and reused by NFc or SCPc before expiration, then the convenience of service access is improved, but the security risk and potential for misuse increases
Solution Approach 1:
The patent introduces a usage count parameter associated with the access token that dynamically changes with each service request. This parameter tracks and limits the number of times a cached token can be reused, thereby maintaining convenience while reducing security risks through controlled usage.
2Productivity
If access tokens allow unlimited usage before expiration, then the productivity and service efficiency are improved, but the system becomes vulnerable to DoS attacks
Solution Approach 1:
The patent applies preliminary action by pre-setting a usage count limit in the access token before it is issued. This predetermined constraint prevents abuse before it can occur, allowing efficient service delivery while protecting against DoS attacks through advance configuration of usage boundaries.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Embodiments of the present disclosure relate to usage of access token in service based architecture. According to one aspect of the present disclosure, a first network device transmits an access token request to a second network device, and receives, from the second network device, an access token associated with a first count value, the first count value indicating the number of times the access token is allowed to be used. The first network device transmits, to a third network device, a service request with the access token; and receives, from the third network device, a service response determined based on the first count value and the access token. In this way, usage of an access token may be restricted and chance of misuse of the access token may be reduced.