API Invocation Authentication Using User Resource Access Tokens
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing API invoking methods in communication systems lack adequate security measures, allowing unauthorized access to user resources without proper authorization, which compromises the integrity of the API access process.
Innovation Solution
An API invoking method and apparatus that utilize user resource access tokens for authentication, ensuring that only authorized entities can access and invoke APIs by performing mutual identity authentication and verifying the authenticity of the tokens using mechanisms like JSON Web tokens and CAPIF core functions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If the AEF directly accesses the API according to API information without authorization, then the API access process is simplified and faster, but the security and authorization control deteriorate
Solution Approach 1:
The patent implements preliminary authorization action before API access. The AEF must first obtain authorization from the ADF based on user resource access tokens before accessing the API. This preliminary authorization step ensures security while maintaining efficient access procedures for authorized entities.
Solution Approach 2:
The patent introduces the ADF as an intermediary component between the AEF and the API. The ADF serves as a mediator that handles authorization checks using user resource access tokens, allowing the AEF to access APIs securely without direct unauthorized access. This intermediary mechanism resolves the contradiction by enabling both secure access and efficient operation.
2Reliability
If authorization verification is added to the API accessing process, then the security is improved, but the process complexity increases
Solution Approach 1:
The patent makes the ADF a universal component that handles multiple functions including user authentication, authorization verification, and API access control. By consolidating these functions into a single multi-functional component, the system achieves improved security without proportionally increasing overall system complexity.
Solution Approach 2:
The ADF acts as an intermediary that centralizes authorization verification logic. Instead of embedding complex authorization checks throughout the system, the ADF serves as a dedicated mediator that handles all authorization requirements, simplifying the overall system architecture while maintaining security.
3Reliability
If user resource access tokens are used for authentication, then the authorization control is improved, but the information processing complexity increases
Solution Approach 1:
The ADF serves as an intermediary that专门 handles token processing and authorization verification. By centralizing token processing in a dedicated component, the system achieves improved authorization control without dispersing complex token processing logic throughout the entire system, thus managing complexity effectively.
Solution Approach 2:
The system implements self-service authorization where the AEF presents user resource access tokens to the ADF, which automatically verifies authorization without requiring complex manual processing. The ADF autonomously processes token validation and authorization decisions, simplifying the overall information processing while maintaining strong authorization control.
Data Source
AI summary
An application programming interface (API) invoking method is executed by an API exposing function (AEF) entity. The method includes: receiving an API invoking request sent by an API invoking entity, and performing API invoking authentication based on API invoking information and a user resource access token. The API invoking request comprises the API invoking information and the user resource access token.