DCCF Access Authorization Using a Composite Token
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing 5G network data collection framework faces inefficiencies and increased workload due to the need for multiple access tokens and signaling when using the optional messaging framework is not utilized, particularly in the context of the Data Collection Coordination Function (DCCF) in 3GPP Rel-17.
Innovation Solution
The proposed solution involves the use of a single, composite access token that combines authorization for both DCCF service access and data collection, reducing the need for multiple token requests and signaling, and eliminating the requirement for Client Credentials Assertion (CCA) tokens.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple access tokens are used for DCCF service access and data collection, then authorization security is improved, but signaling workload and system complexity increase
Solution Approach 1:
The patent combines multiple access tokens (service access token and data collection token) into a single unified access token. This unified token contains both service authorization information and data collection authorization information, eliminating the need for separate token requests and reducing signaling workload while maintaining comprehensive security authorization.
Solution Approach 2:
The unified access token serves multiple functions simultaneously: it provides service access authorization to the DCCF and data collection authorization for the target NF. This multi-functional token replaces the previous dual-token system, reducing complexity while maintaining security across different authorization scenarios.
2Reliability
If multiple access tokens are requested separately, then precise authorization control is improved, but data collection efficiency deteriorates
Solution Approach 1:
The patent performs preliminary consolidation of authorization information into a single unified token before the data collection process begins. The unified token pre-contains both service access and data collection permissions, allowing the data consumer NF to proceed with data collection without additional token requests, thereby improving efficiency while maintaining precise authorization control.
3Reliability
If Client Credentials Assertion (CCA) tokens are required, then security verification is improved, but implementation complexity increases
Solution Approach 1:
The patent extracts and eliminates the requirement for separate CCA tokens from the authorization process. The unified access token directly provides both service and data collection authorization without requiring additional CCA token verification steps, maintaining security verification while significantly reducing implementation complexity.
Data Source
AI summary
Embodiments include methods for a data consumer network function (NF) of a communication network. These methods include sending, to a network repository function (NRF) of the communication network, a request for an access token for the following: a service provided by a 5 data collection coordination function (DCCF) of the communication network, and data to be collected via the DCCF service. These methods include receiving from the NRF at least one access token for the DCCF service and for the data to be collected via the DCCF service and, using the at least one access token, collecting the data from a data producer NF of the communication network via the DCCF service. Other embodiments include complementary methods for DCCFs 0 and NRFs, as well as data consumer NFs, DCCFs, and NRFs configured to perform such methods.