3GPP Network Function Selection with Authentication Profiles
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The selection of service-providing Network Functions (NFs) in a 3GPP communication network is inefficient due to uncertainties regarding the need for client certificates and OAuth2 tokens, leading to unsuccessful service requests and inefficient resource usage.
Innovation Solution
Extending NF profiles with attributes indicating TLS mode and OAuth2 requirements, allowing the Network Repository Function (NRF) to filter compatible NFs and enabling service-requesting NFs to determine appropriate authentication methods.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If service-requesting NFs query the NRF for service information without knowing authentication requirements in advance, then service discovery can be performed, but unsuccessful service requests occur due to incompatible authentication methods
Solution Approach 1:
The NRF performs preliminary filtering of NF profiles based on authentication method compatibility before returning discovery results. The service-requesting NF receives pre-filtered information about which service-providing NFs support its authentication methods (TLS mode, OAuth2), eliminating the need for trial-and-error service requests and reducing unsuccessful requests.
2Productivity
If the NRF provides all NF profiles without filtering by authentication compatibility, then complete service information is available, but resource usage becomes inefficient due to unsuccessful service requests
Solution Approach 1:
The invention extracts and filters only the relevant NF profiles that are compatible with the service-requesting NF's authentication methods from the complete set of available NF profiles. This selective extraction reduces the amount of information that needs to be processed and prevents wasted networking resources on unsuccessful service requests to incompatible NFs.
3Ease of operation
If service-requesting NFs attempt service requests without knowing client certificate requirements, then service discovery is simple, but authentication failures occur leading to inefficient resource usage
Solution Approach 1:
The NRF provides feedback to the service-requesting NF about which service-providing NFs are compatible with its authentication capabilities. This feedback mechanism allows the service-requesting NF to make informed decisions about which NFs to contact, maintaining operational simplicity while significantly improving authentication success rates by avoiding incompatible NFs.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
There is provided mechanisms for enabling selection of service-providing NFs in a 3GPP communication network. A method is performed by an NRF. The method comprises obtaining (S102) one register request from each of the service-providing NFs. Each registration request comprises an NF profile. Each NF profile comprises a security setting attribute. The method comprises storing (S104) the NF profiles of the service-providing NFs. The method comprises obtaining (S108) a discovery request from a service-requesting NF. The request indicates an NF type. The method comprises providing (Slid) a discovery response to the service-requesting NF. The discovery response comprises the NF profile of at least one of the service-providing NFs of the NF type, thereby enabling selection of the service-providing NFs. The security setting attribute may pertain to support for mutual TLS and/or for use of OAuth2-based authorisation.