Vehicle-to-everything (V2X) service access
In some examples, a vehicle-to-everything (V2X) endpoint receives V2X service control information that indicates whether the V2X endpoint is allowed to use one or more V2X services. The V2X endpoint sends, to a network, the V2X service control information when attempting to access a V2X service or a group of V2X services, and receives, from the network in response to the sending of the V2X service control information, V2X authorization information relating to accessing one or more V2X services.
1. A method of at least one hardware processor, comprising:
receiving, by a vehicle-to-everything (V2X) endpoint, V2X service control information that indicates whether the V2X endpoint is allowed to use one or more V2X services, wherein the V2X service control information is received in an information flow according to a standard selected from among an Open Authorization (OAuth) standard, or an OpenID standard, or an Extensible Authentication Protocol (EAP) standard;
sending, by the V2X endpoint to a network, the V2X service control information when attempting to access a V2X service or a group of V2X services; and
receiving, by the V2X endpoint from the network in response to the sending of the V2X service control information, V2X authorization information relating to accessing one or more V2X services.
2. The method of claim 1 , wherein the V2X authorization information comprises one or more of:
one or more indications of which V2X services, if any, are allowed,
one or more indications of which V2X services, if any, are prohibited,
quality of service (QoS) information,
one or more indications to disable or enable one or more access point names (APNs),
one or more indications to allow a connection or disconnection of one or more data connections between the V2X endpoint and the network,
one or more indications to allow detach or attach of the V2X endpoint from or to the network,
one or more indications to enable or disable control of capabilities of the V2X endpoint,
one or more indications to bar or unbar a device identity of the V2X endpoint from the network, and
one or more indications to block or unblock one or more of a source protocol port, a destination protocol port, a source address, and a destination address.
3. The method of claim 1 , wherein the sending of the V2X service control information uses a protocol different or the same as the standard.
4. The method of claim 1 , further comprising:
sending, by the V2X endpoint, first information to a server, the first information including one or more of a location of the V2X endpoint, an identity of the V2X endpoint, and one or more certificates for respective one or more V2X services that the V2X endpoint is to use,
wherein the receiving of the V2X service control information is from the server responsive to the first information.
5. The method of claim 1 , wherein the V2X service control information indicates that the V2X endpoint is not allowed to use one or more V2X services.
6. The method of claim 1 , wherein the V2X service control information indicates that the V2X endpoint is not allowed to use one or more V2X services when roaming or when in a particular network.
7. The method of claim 1 , wherein the V2X service control information includes a token that is part of a network access identifier (NAI).
8. The method of claim 7 , wherein the token is part of a username in the NAI.
9. The method of claim 7 , wherein the token is part of a label in a domain name of the NAI.
10. The method of claim 1 , wherein the V2X service control information includes a token that is part of a Protocol Configuration Options (PCO) information element.
11. The method of claim 1 , wherein the V2X service control information includes a certificate with a stapled Online Certificate Status Protocol (OCSP) response that is part of a Protocol Configuration Options (PCO) information element.
12. The method of claim 1 , wherein the V2X service control information is sent in a message that is part of a wireless network attach procedure.
13. The method of claim 1 , wherein the V2X service control information is sent in a message that is part of a packet data network (PDN) connection procedure.
14. The method of claim 13 , wherein the V2X service control information is sent to an entity as part of an authentication procedure.
15. The method of claim 1 , comprising, for a first V2X service that is determined to be prohibited, blocking use of the first V2X service using one or more of:
disabling one or more access point names (APNs) from a subscriber profile of the V2X endpoint;
disconnecting one or more data connections between the V2X endpoint and the network;
detaching the V2X endpoint from the network;
barring the V2X endpoint from attaching to the network;
enabling control of a capability of the V2X endpoint associated with a function corresponding to the first V2X service;
barring an identity of the V2X endpoint from the network; and
blocking one or more of a source protocol port, a destination protocol port, a source address, and a destination address.
16. The method of claim 1 , comprising, for a first V2X service that is determined to be allowed, allowing the first V2X service using one or more of:
enabling one or more access point names (APNs) in a subscriber profile of the V2X endpoint;
allowing a connection of one or more data connections between the V2X endpoint and the network;
allowing an attachment of the V2X endpoint to the network;
disabling control of a capability of the V2X endpoint associated with a function corresponding to the first V2X service;
unbarring an identity of the V2X endpoint from the network; and
unblocking one or more of a source protocol port, a destination protocol port, a source address, and a destination address.
17. A system comprising:
a processor; and
a non-transitory storage medium storing instructions executable on the processor to:
receive, from a vehicle-to-everything (V2X) endpoint, V2X service control information that indicates whether the V2X endpoint is allowed to use one or more V2X services;
determine, based on checking a certificate in the V2X service control information, a given V2X service that is allowed or disallowed; and
send, to the V2X endpoint, a response indicating the given V2X service that is allowed or disallowed.
18. The system of claim 17 , wherein the determining of whether the given V2X service is allowed or disallowed is based on or more of: determining whether an information element in the V2X service control information is authentic, determining whether an information element in the V2X service control information has expired, or checking a certificate revocation list.
19. A non-transitory machine-readable storage medium storing instructions that upon execution cause a vehicle-to-everything (V2X) endpoint device to:
receive V2X service control information that indicates whether the V2X endpoint device is allowed to use one or more V2X services;
send, to a network, the V2X service control information when attempting to access a V2X service or a group of V2X services, wherein the V2X service control information is sent in a message that is part of a wireless network attach procedure or a packet data network (PDN) connection procedure; and
receive, from the network in response to the sending of the V2X service control information, V2X authorization information relating to accessing one or more V2X services.
20. The non-transitory machine-readable storage medium of claim 19 , wherein the V2X service control information is received in an Online Certificate Status Protocol (OCSP) message.
21. The non-transitory machine-readable storage medium of claim 19 , wherein the V2X service control information is received in a JavaScript Object Notation (JSON) web token.
22. The non-transitory machine-readable storage medium of claim 19 , wherein the V2X service control information is received in a certificate.