Exposure Governance Control Information Object Class Instances in 3GPP
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing 5G management systems lack effective exposure governance mechanisms to control access to management capabilities for external third-party consumers, particularly in the context of Service-Based Management Architecture, where visibility and access control for consumers outside the OAM domain are not adequately defined.
Innovation Solution
A system and method for managing exposure governance control information in 3GPP management systems, utilizing an Exposure Governance Management Function (EGMF) to create and manage ExposureGovernanceControl Information Object Class (IOC) instances, which regulate the exposure of management capabilities to external consumers based on their type and contract with the operator, ensuring appropriate access while preventing exposure to the entire set of capabilities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If management capabilities are exposed to external third-party consumers in 5G systems, then service versatility and ecosystem expansion are improved, but security risks and unauthorized access increase
Solution Approach 1:
The patent segments management capabilities into different exposure levels and categories. It introduces selective exposure mechanisms where only specific capabilities are made available to external consumers based on their authorization level, rather than exposing all capabilities uniformly. This segmentation resolves the contradiction by enabling service versatility for authorized consumers while preventing unauthorized access to sensitive capabilities.
Solution Approach 2:
The patent introduces an intermediary authorization mechanism that mediates between management capability providers and external consumers. This intermediary layer validates consumer authorization levels and determines which capabilities can be exposed, thereby enabling service expansion while maintaining security through controlled access mediation.
2Measurement precision
If exposure governance control information is implemented to regulate access to management capabilities, then access control precision is improved, but system complexity increases
Solution Approach 1:
The patent implements preliminary authorization actions where consumer authorization levels are established before capability exposure. By performing authorization determination in advance, the system achieves precise access control without requiring complex real-time decision-making mechanisms, thus reducing operational complexity while maintaining control precision.
Solution Approach 2:
The patent uses parameter-based authorization levels to simplify the governance control information structure. Instead of complex access control policies, the system uses discrete authorization parameters (e.g., authorization levels) that determine capability exposure, achieving precise control with reduced system complexity.
3Measurement precision
If selective exposure of management capabilities is implemented based on consumer authorization levels, then access control accuracy is improved, but information loss for unauthorized consumers increases
Solution Approach 1:
The patent applies local quality by providing different levels of access information to different consumer groups. Authorized consumers receive detailed capability information enabling full access, while unauthorized consumers receive limited information preventing access. This local differentiation achieves accurate access control while minimizing information loss to authorized users.
Data Source
AI summary
The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. The present disclosure relates to a system and method for managing exposure governance control information in 3GPP management system. The method includes receiving, from a network entity by an EGMF, a create MOI request comprising at least one of a consumer identification (ID) with respect of each of a registered consumer with the BSS and an exposure governance control information corresponding to the consumer ID. The method further includes creating by the EGMF, based on the received createMOI request, an instance for ExposureGovernanceControl Information Object Class (IOC) comprising a plurality of IOC attributes, wherein the plurality of IOC attributes are related to the exposure governance control information. Thereafter, the method further includes sending, by the EGMF, a response to the network entity upon successful creation of the instance for ExposureGovernanceControl IOC.