Network repository function services access authorization
Embodiments of the present disclosure relate to devices, methods, apparatuses and computer readable storage media of NRF services access authorization. The method comprises generating, at a first device, an indication of whether an authorization is required for accessing a service provided by the first device; and transmitting the indication to a second device. With the solution of the present disclosure, the indication of whether an authorization is required for accessing a service provided by the NRF can be provided from the NRF to other NFs, which may improve the system performance without increasing the extra signaling overhead.
1 . A method comprising:
receiving a bootstrapping request from a first device, wherein the first device comprises one of the following:
a network function consumer,
a further network repository function entity,
a service communication proxy,
a network slice selection function entity,
an access and mobility management function entity, and
an intermediate session management function entity;
generating, at a second device, an indication of whether an authorization is required for accessing a service provided by the second device and bootstrapping information as a response to the bootstrapping request; and
transmitting the indication and bootstrapping information in the response to the first device.
2 . The method of claim 1 , further comprising:
receiving, from the first device, a request for the authorization for accessing the service;
in accordance with a determination that the service is authorized to be accessed by the first device, transmitting, to the first device, authorization information for the first device to access the service; and
in accordance with a determination that the authorization information is obtained from a further request for the service received from the second device, providing the requested service to the first device.
3 . The method of claim 1 , further comprising:
receiving, from the first device, a request for the authorization for a third device to access the service;
in accordance with a determination that the service is authorized to be accessed by the third device, transmitting, to the first device, authorization information for the third device to access the service;
in accordance with a determination that the authorization information is obtained from a further request for the service received from the first device, providing the requested service to the first device.
4 . The method of claim 1 , wherein the second device comprises a network repository function entity.
5 . A method comprising:
transmitting a bootstrapping request to a first device;
receiving at a second device and from the first device, an indication of whether an authorization is required for accessing a service provided by the first device and bootstrapping information from a response to the bootstrapping request, wherein the second device comprises one of the following:
a network function consumer,
a further network repository function entity,
a service communication proxy,
a network slice selection function entity,
an access and mobility management function entity, and
an intermediate session management function entity; and
determining an authorization requirement of the first device for accessing the service provided by the first device based on the indication.
6 . The method of claim 5 , further comprising:
in accordance with a determination, based on the indication, that the authorization for accessing the service provided by the first device is required, transmitting a request for the authorization for accessing the service provided by the first device;
in accordance with a determination that authorization information for the second device to access the service is received from the first device, transmitting, to the first device, a further request for the service including the authorization information; and
receiving a response associated with the service provided by the first device.
7 . The method of claim 5 , further comprising:
in accordance with a determination that a request for the service is received from a third device, determining, based on the indication, whether the authorization for accessing the service provided by the first device is required;
in accordance with a determination that the authorization for accessing the service provided by the first device is required, transmitting a further request for the authorization for the third device to access the service;
in accordance with a determination that authorization information for the third device to access the service is received from the first device, transmitting, to the first device, the request for the service including the authorization information;
in accordance with a determination that the service was provided by the first device, responding to the request received from the third device based on the response provided by the first device.
8 . The method of claim 5 , further comprising:
in accordance with a determination that a request for the service is received from a third device, determining, based on the indication, whether the authorization for accessing the service provided by the first device is required;
in accordance with a determination that the authorization for accessing the service is required by the first device, rejecting the request for the service.
9 . The method of claim 8 , further comprising:
in accordance with a determination that a further request for the authorization for accessing the service provided by the first device is received from the third device, forwarding the further request to the first device;
in accordance with a determination that authorization information for the third device to access the service provided by the first device is received from the first device, forwarding the authorization information to the third device;
in accordance with a determination that the request for the service provided by the first device including the authorization information is received from a third device, forwarding the request to the first device; and
in accordance with a determination that the service is provided by the first device, responding to the request received from the third device based on the response provided by the first device.
10 . The method of claim 5 , further comprising:
in accordance with a determination that a bootstrapping request is received from a third device, generating a further indication on whether a further authorization is required for accessing a further service provided by the second device;
generating a further response for the bootstrapping request based on the further indication and the indication on whether an authorization is required for accessing the service provided by the first device; and
transmitting the further response for the bootstrapping request to the third device.
11 . The method of claim 5 , wherein the first device comprises a network repository function entity.
12 . A first device, comprising:
at least one processor; and
at least one memory storing instructions that, when executed by the at least one processor, cause the first device at least to perform:
determining that a bootstrapping request is received from a second device;
generating an indication of whether an authorization is required for accessing a service provided by the first device and bootstrapping information as a response to the bootstrapping request, wherein the first device comprises one of the following:
a network function consumer,
a further network repository function entity,
a service communication proxy,
a network slice selection function entity,
an access and mobility management function entity, and
an intermediate session management function entity; and
transmitting the indication and bootstrapping information in the response to the second device.
13 . A second device, comprising:
at least one processor; and
at least one memory storing instructions that, when executed by the at least one processor, cause the second device at least to perform:
sending a bootstrapping request to a first device;
receiving from the first device, an indication of whether an authorization is required for accessing a service provided by the first device and bootstrapping information as a response to the bootstrapping request, wherein the second device comprises one of the following:
a network function consumer,
a further network repository function entity,
a service communication proxy,
a network slice selection function entity,
an access and mobility management function entity and
an intermediate session management function entity; and
determining an authorization requirement of the first device for accessing the service provided by the first device based on the indication.