Proxy Authorization Tokens for Secure Network Service Access

The patent applies preliminary action by embedding proxy authorization indications in credential data elements and access tokens before they are issued. This pre-configuration of authorization information ensures that proxies can only access services they are explicitly authorized for, preventing malicious reuse while maintaining operational ease. The NF consumer registers authorized proxies with the NRF in advance, and the NRF embeds these authorization indications in the issued credentials.

The patent uses the Network Repository Function (NRF) as an intermediary to manage and verify proxy authorizations. The NRF receives registration information from NF consumers about which proxies are authorized, issues credentials with embedded authorization indications to both NF consumers and proxies, and enables the NF producer to verify these indications. This intermediary mechanism secures credential reuse by ensuring only legitimately authorized proxies can access services.

The patent merges proxy authorization information directly into the existing access token structure by embedding proxy authorization indications within the credential data elements and access tokens. This integration approach avoids creating separate complex authorization systems while enhancing security. The NF consumer, NRF, and NF producer all work with the same unified token structure that now includes embedded authorization information.

The patent changes the parameters of existing credential data elements and access tokens by adding embedded proxy authorization indications. Instead of creating entirely new complex authorization mechanisms, the solution modifies the existing token structure to include additional authorization parameters. This allows the NF producer to verify proxy authorization by checking these embedded indications, enhancing security without requiring fundamental system restructuring.