Network Function Certificate for Authorization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In modern communication networks, the validation of access tokens for network function consumers (NFc) to access services from network function producers (NFp) is computationally expensive and can become a performance bottleneck, especially with frequent accesses, and existing authorization methods like OAuth 2.0 and static authorization have limitations such as high processing delays and inflexibility.
Innovation Solution
The proposed solution involves using a network function certificate (NF certificate) that authenticates the identity of NFc and includes authorization information, allowing NFc to access permitted services provided by NFp, leveraging Transport Layer Security (TLS) enhancements, where the NF certificate is obtained from a network manager or certification authority server and used for both authentication and authorization purposes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If OAuth 2.0 access token validation is used for authorization, then security is improved, but computational resources are consumed excessively and processing delays increase
Solution Approach 1:
The patent merges authentication and authorization functions into a single certificate validation process. The NF certificate contains both identity authentication information and service authorization information, eliminating the need for separate OAuth 2.0 token validation and reducing computational overhead while maintaining security.
Solution Approach 2:
The NF certificate serves multiple functions simultaneously: it acts as an authentication credential for identity verification and as an authorization token for service access control. This multi-functional approach replaces the separate authentication and authorization mechanisms, improving efficiency without compromising security.
2Productivity
If static authorization rules are preconfigured at NFp, then authorization can be validated without complex token operations, but the system becomes inflexible and difficult to update
Solution Approach 1:
The authorization information in the NF certificate is dynamically issued and updated by the network manager based on current service requirements. This dynamic approach allows the system to adapt to changing authorization needs while maintaining fast validation speeds, as the certificate itself contains all necessary authorization information without requiring complex rule matching.
Solution Approach 2:
The network manager pre-configures the authorization information within the NF certificate before the NFc accesses the service. This preliminary action embeds all necessary authorization rules directly in the certificate, enabling fast validation at NFp without requiring real-time rule configuration or complex processing during service access.
3Reliability
If public keys are preconfigured at NFp for token validation, then validation can proceed, but frequent accesses become a performance bottleneck
Solution Approach 1:
The patent combines authentication and authorization validation into a single certificate verification operation. By validating the NF certificate that contains both identity and service authorization information, the system eliminates the need for separate public key operations for each type of validation, reducing the time loss for frequent accesses.
Data Source
AI summary
Inter-alia, methods and apparatuses are disclosed for authorization of a network function consumer by a network function provider.