Network Access Token Reuse for Signaling Reduction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current communication systems face inefficiencies in managing access tokens for network functions, particularly in scenarios where additional access rights are required for subsequent service requests, leading to increased signaling and processing resources.
Innovation Solution
The implementation of a mechanism where an access token associated with more access rights than needed for an initial service can be reused for subsequent service requests, eliminating the need for new token requests and reducing signaling and processing burdens.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a new access token is requested for each service request, then access control security is maintained, but signaling overhead and processing resources increase
Solution Approach 1:
The system performs preliminary authorization by granting an access token that includes additional access rights beyond what is immediately needed for the first service. This preliminary action with expanded scope prevents the need for subsequent authorization requests, reducing signaling overhead while maintaining security through controlled token issuance.
Solution Approach 2:
The access token is designed with multi-functionality by incorporating additional access rights that enable it to serve multiple service requests across different services. This universal token reduces the need for service-specific token requests, decreasing signaling overhead while maintaining appropriate access control through the token's embedded permissions.
2Productivity
If access tokens include additional access rights beyond the first service, then subsequent service requests can be fulfilled without new tokens, but token scope management complexity increases
Solution Approach 1:
The system changes the parameter of token scope by dynamically determining the appropriate level of additional access rights to include in the access token. By adjusting the scope parameter based on service requirements and authorization policies, the system enables efficient subsequent service requests while managing complexity through controlled parameter variation rather than rigid fixed-scope tokens.
3Loss of energy
If the same access token is reused for multiple services, then processing resources are reduced, but access control precision may be compromised
Solution Approach 1:
The system implements feedback mechanisms where the authorization server monitors and tracks the usage of access tokens across different services. This feedback enables the system to verify that the additional access rights embedded in the token are being used appropriately, maintaining access control precision while allowing token reuse for processing efficiency.
Data Source
AI summary
There is provided a method, apparatus, and computer program for causing a first network apparatus to perform: signalling, to a second network apparatus, a request for an access token for a network function consumer for authorizing the network function service consumer to access a first service from a network function service producer; receiving an access token from the second network apparatus, wherein the received access token comprises an indication of at least one second access right unassociated with accessing the first service; and causing the received access token to be provided to the network function service producer when the network function service producer is signalled a request to provide a service to the network function service consumer.