Apparatus, methods, and computer programs

Patent metadata

Field	Value
Publication number	US-12563031-B2
Application number	US-202218045910-A
Country	US
Kind code	B2
Filing date	Oct 12, 2022
Priority date	Oct 18, 2021
Publication date	Feb 24, 2026
Grant date	Feb 24, 2026

Abstract

There is provided an apparatus, method and computer program for a proxy function that causes the apparatus to: receive, from a network repository function, profile information relating to a network function service producer: determine from the profile information whether the network function service producer is able to use an access token for subscribing to a service that indicates a plurality of entities; select a mechanism for requesting an access token for subscribing to a service in dependence on the determination; and request, from the network repository function, a first access token for subscribing to a service on behalf of a first network function service consumer based on the selected mechanism.

First claim

The invention claimed is:

1 . An apparatus for a Data Collection Coordination and Delivery Function (DCCF), the apparatus comprising:
at least one processor, at least one memory storing instructions that, when executed by the at least one processor, cause the DCCF at least to:
receive, from a first network function service consumer, a first service request for a service;
comprise, in a first access token request, an indication that both the DCCF and the first network function service consumer are to be indicated as service consumers;
signal, to a network repository function, the first access token request for a first access token authorizing the service provided by a network function service producer to the first network function service consumer and the DCCF;
receive, from the network repository function, the first access token indicating the DCCF and the first network function service consumer; and
signal, to the network function service producer, a second service request on behalf of the first network function service consumer for the service provided by the network function service producer, the second service request comprising the first access token indicating the DCCF and the first network function service consumer.

2 . The apparatus as claimed in claim 1 , wherein:
the DCCF is added as an additional access token claim of the first access token.

3 . The apparatus as claimed in claim 1 , wherein the DCCF is further caused to:
receive, from the network function service producer, an indication that the first network function service consumer is authorized for the service.

4 . The apparatus as claimed in claim 1 , wherein the DCCF is further caused to:
receive, from a second network function service consumer, a third service request for the service; comprise, in a second access token request, an indication that both the DCCF and the second network function service consumer are to be indicated as service consumers; and signal, to the network repository function, the second access token request for a second access token authorizing the service provided by the network function service producer to the second network function service consumer and the DCCF.

5 . The apparatus as claimed in claim 4 , wherein the DCCF is further caused to:
receive, from the network repository function, the second access token indicating the DCCF and the second network function service consumer; and signal, to the network function service producer, fourth service request on behalf of the second network function service consumer for the service provided by the network function service producer, the subscription fourth service request comprising the second access token indicating the DCCF and the second network function service consumer.

6 . The apparatus as claimed in claim 5 , wherein:
the DCCF is added as an additional access token claim of the second access token.

7 . The apparatus as claimed in claim 1 , wherein the DCCF is further caused to:
select the network function service producer when the network function service producer is unspecified in the first service request.

8 . The apparatus as claimed in claim 1 , wherein:
the network function service producer is specified in the first service request.

9 . The apparatus as claimed in claim 1 , wherein:
the first access token request comprises identifiers for the DCCF and the first network function service consumer.

10 . The apparatus as claimed in claim 1 , wherein:
the first network function service consumer comprises a network data analytics function (NWDAF).

11 . The apparatus as claimed in claim 1 , wherein the DCCF is further caused to:
register profile information for the DCCF at the network repository function, wherein the profile information indicates whether the DCCF is able to allow service requests to proceed for a plurality of consumer network functions.

12 . A method for a Data Collection Coordination and Delivery Function (DCCF), the method comprising:
receiving, from a first network function service consumer, a first service request for a service; comprising, in a first access token request, an indication that both the DCCF and the first network function service consumer are to be indicated as service consumers; signaling, to a network repository function, the first access token request for a first access token authorizing the service provided by a network function service producer to the first network function service consumer and the DCCF; receiving, from the network repository function, the first access token indicating the DCCF and the first network function service consumer; and signaling, to the network function service producer, a second service request on behalf of the first network function service consumer for the service provided by the network function service producer, the second service request comprising the first access token indicating the DCCF and the first network function service consumer.

13 . The method as claimed in claim 12 , wherein:
the DCCF is added as an additional access token claim of the first access token.

14 . The method as claimed in claim 12 , further comprising:
receiving, from the network function service producer, an indication that the first network function service consumer is authorized for the service.

15 . The method as claimed in claim 12 , further comprising:
receiving, from a second network function service consumer, a third service request for the service; comprising, in a second access token request, an indication that both the DCCF and the second network function service consumer are to be indicated as service consumers; and signaling, to the network repository function, the second access token request for a second access token authorizing the service provided by the network function service producer to the second network function service consumer and the DCCF.

16 . The method as claimed in claim 15 , further comprising:
receiving, from the network repository function, the second access token indicating the DCCF and the second network function service consumer; and signaling, to the network function service producer, a fourth service request on behalf of the second network function service consumer for the service provided by the network function service producer, the fourth service request comprising the second access token indicating the DCCF and the second network function service consumer.

17 . The method as claimed in claim 16 , wherein:
the DCCF is added as an additional access token claim of the second access token.

18 . The method as claimed in claim 12 , further comprising:
selecting the network function service producer when the network function service producer is unspecified in the first service request.

19 . The method as claimed in claim 12 , wherein:
the network function service producer is specified in the first service request.

20 . The method as claimed in claim 12 , wherein:
the first access token request comprises identifiers for the DCCF and the first network function service consumer.

Assignees

• Nokia Technologies Oy

Inventors

• Khare Saurabh
• Aggarwal Chaitanya
• Gkellas Georgios

Classifications

• H04L63/083 Primary

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04L63/0807 Primary

  using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213) · CPC title