API Topology Hiding via CCF Entry Point
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In the 3GPP-defined CAPIF, the API invoking entity directly accesses the AEF that provides the API, making it vulnerable to malicious attacks and resulting in exhaustion of software and hardware resources, thereby reducing system security.
Innovation Solution
Implementing an API topology hiding method where the CCF determines a topology hiding entry point, allowing the API invoking entity to send requests to this entry point instead of directly accessing the AEF, thereby hiding the AEF and enhancing system security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the API invoking entity directly accesses the AEF that provides the API, then the access process is simple and direct, but the system security is reduced and the AEF is vulnerable to malicious attacks
Solution Approach 1:
The patent introduces a topology hiding entry point as an intermediary between the API invoking entity and the AEF. This entry point receives API invoking requests from the API invoking entity, determines the target AEF based on the API identifier, and forwards the request to the appropriate AEF. This intermediary mechanism hides the direct topology relationship, preventing criminals from obtaining AEF information while maintaining normal API invocation functionality.
2Object-affected harmful factors
If the AEF information is exposed to the API invoking entity, then the API invocation is efficient, but the AEF becomes vulnerable to malicious attacks and resource exhaustion
Solution Approach 1:
The patent performs preliminary action by pre-configuring the topology hiding entry point with the mapping relationships between API identifiers and AEF identifiers. When an API invocation request arrives, the entry point can quickly determine the target AEF based on the API identifier without needing to query or expose AEF information. This preliminary configuration enables fast lookup and forwarding while maintaining security.
Data Source
AI summary
Embodiments of this application relate to the field of communications technologies, and disclose an application programming interface (API) topology hiding method, a device, and a system. A common API framework core function (CCF) receives, from a topology hiding request entity, a request message that includes information about an API and that is used to request to hide an API exposing function (AEF) that provides the API. Based on the request message, a topology hiding entry point used by an API invoker to invoke the API is determined. An identifier of the API and an identifier of the AEF that provides the API are sent to the topology hiding entry point so that the topology hiding entry point hides the AEF that provides the API.