Network Authorization Checks for UE Consent and Service Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems face security issues due to unauthorized terminal user equipment (UE) and network resource usage, particularly in AI/ML service authorization, where local configuration-based authorization methods fail to satisfy specific service requirements and user consent needs.
Innovation Solution
Implement a multi-step authorization method involving network devices that perform checks for UE consent and service authorization, including receiving service messages, searching for user consent and service authorizations, and generating access tokens to ensure authorized access to services.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If local configuration-based authorization check is performed on service message, then authorization check can be completed, but security issues occur due to unauthorized terminal UE or network resources being used
Solution Approach 1:
The patent introduces a second network device as an intermediary to store and verify user consent and service authorization information. Instead of relying solely on local configuration in the first network device, the system uses a centralized storage mechanism where the second network device acts as a mediator to provide authoritative authorization data, thereby resolving the security issues caused by insufficient local authorization checks
Solution Approach 2:
The system performs preliminary authorization checks by storing user consent and service authorization information in advance in the second network device. Before providing services, the first network device queries the pre-stored authorization information, ensuring that authorization verification is completed beforehand rather than relying on potentially incomplete local configuration
2Reliability
If multi-step authorization check involving user consent verification is implemented, then security is improved, but system complexity increases due to multiple network devices and steps
Solution Approach 1:
The authorization system is segmented into distinct functional components: the first network device handles service message reception and initial authorization checking, while the second network device is dedicated to storing and managing user consent and service authorization information. This segmentation allows each component to specialize in specific tasks, improving overall system security while maintaining manageable complexity through clear functional separation
Data Source
Figure 1~2
Figure 3
Figure 4~5
AI summary
The embodiments of the present application provide an authorization method and a device. The authorization method includes: receiving, by a first network device, a service message; and performing, by the first network device, a first authorization check on the service message, where the first authorization check includes an authorization check for a UE involved in the service message. The embodiments of the present application may improve security.