Service authorization method, communication apparatus, and system
US-2023262459-A1 · Aug 17, 2023 · US
US12407561B2 · US · B2
| Field | Value |
|---|---|
| Publication number | US-12407561-B2 |
| Application number | US-202217573410-A |
| Country | US |
| Kind code | B2 |
| Filing date | Jan 11, 2022 |
| Priority date | Jan 13, 2021 |
| Publication date | Sep 2, 2025 |
| Grant date | Sep 2, 2025 |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
According to an example aspect, there is provided a method, comprising: receiving, by a service communication proxy from a network function consumer, a service request for a service by a network function producer, transmitting, in response to an error in obtaining an access token from a network repository function on the basis of the service request, a response to the service request to the network function consumer, wherein the access token is for authorizing access to a service at the network function producer and the response is indicative of an access token error.
Opening claim text (preview).
The invention claimed is: 1. An apparatus comprising at least one processing core, at least one memory including computer program code, the at least one memory and the computer program code being configured to, with the at least one processing core, cause the apparatus at least to: receive, from a network function consumer, a service request for a service by a network function producer, transmit, in response to an error in obtaining an access token directly from a network repository function on the basis of the service request, a response to the service request to the network function consumer wherein the response comprises an identity of the network repository function that rejected the access token request, and wherein the access token is for authorizing access to a service at the network function producer and the response is indicative of an access token error, and wherein the apparatus comprises a service communication proxy of a service based architecture system. 2. The apparatus according to claim 1 , wherein the at least one memory and the computer program code are configured to, with the at least one processing core, cause the apparatus to: transmit, to the network repository function, an access token request for the access token which authorizes access to the service produced by the network function producer, receive, from the network repository function, a response to the access token request, wherein the response is indicative of a rejection of the access token request, and transmit the response indicative of the access token error to the network function consumer in response to the received response to the access token request. 3. The apparatus according to claim 2 , wherein the at least one memory and the computer program code are configured to, with the at least one processing core, cause the apparatus to include, in the response indicative of the access token error, information further specifying the rejection of the access token request in accordance with the received response to the access token request from the network repository function. 4. The apparatus according to claim 2 , wherein the at least one memory and the computer program code are configured to, with the at least one processing core, cause the apparatus to detect the access token error and transmit the response indicative of the access token error in response to failing to generate an access token request to the network repository function on the basis of the service request. 5. The apparatus according to claim 2 , wherein the at least one memory and the computer program code are configured to, with the at least one processing core, cause the apparatus to include, in the response indicative of the access token error, an access token error attribute indicating details on the access token error on the basis of an access token error attribute from the network repository function. 6. The apparatus according to claim 2 , wherein the at least one memory and the computer program code are configured to, with the at least one processing core, cause the apparatus to include, in the response indicative of the access token error, an indication of an access token denied error and/or an indication of a missing access token information element. 7. The apparatus according to claim 2 , the at least one memory and the computer program code are configured to, with the at least one processing core, cause the apparatus to specify, in the response indicative of the access token error, the access token error in a problem details object of a hypertext transfer protocol error response message payload. 8. The apparatus according to claim 2 , wherein the at least one memory and the computer program code are configured to, with the at least one processing core, cause the apparatus to include, in the response indicative of the access token error, an identifier of a target network function instance or a target network function set that was discovered and selected by the apparatus. 9. The apparatus according to claim 2 , wherein the network function producer is a network function service producer and the network function consumer is a network function service consumer. 10. A method, comprising: receiving, by a service communication proxy from a network function consumer, a service request for a service by a network function producer, transmitting, by the service communication proxy, in response to an error in obtaining an access token directly from a network repository function on the basis of the service request, a response to the service request to the network function consumer wherein the response comprises an identity of the network repository function that rejected the access token request, and, wherein the access token is for authorizing access to a service at the network function producer and the response is indicative of an access token error. 11. The method of claim 10 , comprising: transmitting, to the network repository function, an access token request for the access token which authorizes access to the service produced by the network function producer, receiving, from the network repository function, a response to the access token request, wherein the response is indicative of a rejection of the access token request, and transmitting the response indicative of the access token error to the network function consumer in response to the received response to the access token request.
based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title
using network fault recovery (ring fault isolation or reconfiguration in loop networks without recovery actions by a network management system H04L12/437) · CPC title
using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807) · CPC title
Adding application-functional data or data for application control, e.g. adding metadata · CPC title
to features or functions of an application · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.