Flexible 5G Core Authorization via Batched NF Service Requests
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional 5G NF service access authorization procedures involve multiple signaling messages and token requests, leading to increased latency and network traffic due to the need for individual access token requests for each service, especially in scenarios with no existing access tokens or when tokens cannot be reused.
Innovation Solution
A method where a Network Function (NF) service consumer sends a single authorization request to an authorization server, receiving a token that authorizes access to multiple NF producers, reducing the number of token requests and enhancing processing capacity by using a single token for multiple services.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If individual access token requests are made for each NF service, then service access authorization is ensured, but latency and network traffic increase
Solution Approach 1:
The patent combines multiple individual token requests into a single batched authorization request. The NF service consumer collects service identifiers for multiple NF services and sends them together in one authorization request to the authorization server, reducing the number of round-trip signaling messages and lowering latency while maintaining proper authorization for each service.
Solution Approach 2:
The patent implements preliminary batching of service identifiers before sending the authorization request. The NF service consumer prepares the complete list of required NF service identifiers in advance and includes them all in a single authorization request, avoiding multiple sequential requests and reducing overall processing time.
2Reliability
If individual access token requests are made for each NF service, then service access authorization is ensured, but network traffic increases
Solution Approach 1:
The patent merges multiple authorization requests into a single batched request containing multiple NF service identifiers. This consolidation reduces the total volume of signaling messages exchanged between the NF service consumer and the authorization server, thereby reducing network traffic while ensuring all services are properly authorized.
3Adaptability or versatility
If multiple token requests are sent, then access to multiple NF services is authorized, but processing capacity is reduced
Solution Approach 1:
The patent combines multiple authorization operations into a single batched processing task. The authorization server receives one request containing multiple NF service identifiers and processes them together, reducing the total number of processing cycles required compared to handling multiple separate requests, thereby improving overall processing capacity.
Solution Approach 2:
The patent creates a universal batched authorization request format that can handle multiple different NF service identifiers in a single message. This multi-functional approach allows the authorization system to serve multiple services through one standardized interface, improving efficiency without sacrificing adaptability to different service types.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
Methods and systems for optimizing Network Function (NF) service authorization are presented. According to one aspect, a method implemented in an NF consumer comprises: sending, to an authorization server, an authorization request for a procedure that involves a plurality of NF services; and receiving, from the authorization server, an authorization response for the procedure, the authorization response including information authorizing access to the plurality of NF services. In some embodiments, the NF consumer may comprise an Access and Mobility Management Function (AMF). In some embodiments, the authorization server may comprise a Network Repository Function (NRF). In some embodiments, the authorization response may include one or more access tokens.