RCS Authentication via IMS OAuth Grants
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing Rich Communication Services (RCS) authentication methods, such as one-time-password (OTP) and username/password authentication, are cumbersome for users, especially when the RCS application is running on a native device like a phone, as they require user interaction.
Innovation Solution
The implementation of Open Authorization (OAuth) using an existing IMS network to issue authorization grants for RCS services, which are then exchanged between the network and trusted applications on the device without requiring user interaction, allowing seamless authentication and service access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If OTP or username/password authentication is used for RCS services, then user authentication can be achieved, but user interaction is required making the process cumbersome
Solution Approach 1:
The system enables self-service authentication by having the device automatically perform OAuth authentication with the RCS network using pre-configured credentials and authorization grants, eliminating the need for user interaction while maintaining security through automated token exchange and verification processes
Solution Approach 2:
The device performs preliminary OAuth authentication with the RCS network before the user needs to access RCS services, obtaining authorization grants in advance that are stored and automatically used for subsequent service access, thereby eliminating the need for user interaction at the time of service usage
2Ease of operation
If OAuth authentication is implemented with automatic device integration, then user interaction is eliminated, but system complexity increases
Solution Approach 1:
The device's existing OAuth client capability is leveraged to serve multiple functions: authenticating with the RCS network, obtaining authorization grants, and enabling seamless RCS service access, thereby avoiding the need for separate dedicated authentication mechanisms and reducing overall system complexity
Solution Approach 2:
The patent introduces an OAuth authorization grant as an intermediary token that mediates between the device's OAuth authentication capability and the RCS network's service access requirements, simplifying the interaction by using standardized OAuth protocols rather than custom authentication mechanisms
Data Source
Figure 1
Figure 2
Figure 3
AI summary
In a system and a method for providing authentication for Rich Communication Services (RCS) application on a user equipment (UE), a Proxy Call Session Control Function (P-CSCF) of the IMS receives a SIP REGISTER request message sent from an IMS Session Initiation Protocol (SIP) client on the UE as part of an authentication of the IMS SIP client. A Serving Call Session Control Function (S-CSCF) of the IMS or a registration service performs an Authentication and Key Agreement (AKA) challenge with the IMS SIP client as part of the authentication. A Home Subscriber Server (HSS) of the IMS or a Unified Data Management (UDM) function provides, upon successful authentication of the IMS SIP client, an initial authorization grant for the IMS SIP client. The RCS application, after obtaining the initial authorization grant, registers for RCS service with the RCS network, via RCS Application Programming Interface Gateway (API GW).