Apparatus and method for providing mobile edge computing services in wireless communication system

1. An operation method of a user equipment (UE) in a wireless communication system, the method comprising:

performing an authentication procedure to access the wireless communication system;

obtaining an authentication and key management for application (AKMA) key for an edge computing service based on the authentication procedure;

transmitting, to a server, a request message for requesting authorization for the edge computing service, wherein the request message includes an AKMA key identifier (ID) corresponding to the AKMA key;

receiving, from the server, a response message indicating authority granted to the edge computing service, wherein the response message includes an access token for the edge computing service based on the AKMA key ID; and

using the edge computing service corresponding to the access token.

2. The method of claim 1 , wherein the authentication procedure is performed based on at least one of an authentication method based on a universal subscriber identity module (USIM) credential, an authentication method based on a user portal, an authentication method based on a credential generated using information related to the UE, or an authentication method based on transmission of a one-time password (OTP).

3. The method of claim 1 , wherein, when the authentication procedure is performed based on a universal subscriber identity module (USIM) credential, the performing of the authentication procedure comprises:

receiving, from the server, a message including random number information and an authentication token necessary for the UE to perform an authentication procedure; and

identifying whether or not the authentication token included in the received message matches an authentication token generated by the UE.

4. The method of claim 1 ,

wherein, when the authentication procedure is performed based on a user portal, the performing of the authentication procedure comprises:

displaying a screen for inputting authentication credential information, based on a message for inputting the authentication credential information received from the server;

detecting an input of the authentication credential information; and

transmitting the authentication credential information to the server, and

wherein the authentication credential information comprises at least one of a user identification (ID) or a password.

5. The method of claim 1 , wherein, when the authentication procedure is performed based on a credential generated using information related to the UE, the performing of the authentication procedure comprises:

receiving, from the server, a request message comprising random number information generated by the server;

generating a message authentication code (MAC), based on at least one piece of the random number information included in the received request message or the information related to the UE;

transmitting a response message including the MAC to the server; and

receiving the authentication code from the server, based on verification of the MAC included in the response message.

6. The method of claim 1 , wherein, when the authentication procedure is performed based on a transmission of a one-time password (OTP), the performing of the authentication procedure comprises:

receiving an OTP from the server;

receiving, from the server, a request message comprising random number information generated by the server;

generating a message authentication code (MAC), based on at least one of piece of the random number information included in the received request message, a value of the received OTP, or the information related to the UE;

transmitting a response message including the MAC to the server; and

receiving the authentication code from the server, based on verification of the MAC included in the response message.

7. The method of claim 1 , wherein the access token is encrypted based on the AKMA ID.

8. An operation method of a server for authorization for an edge computing service, the method comprising:

receiving, from a user equipment (UE), a request message for requesting authorization for the edge computing service, wherein the request message includes an authentication and key management for application (AKMA) key identifier (ID) corresponding to the AKMA key;

determining whether the UE is authorized to access the edge computing service;

generating an access token for the UE when the UE is authorized to access the edge computing service; and

transmitting a response message indicating authority granted to the edge computing service,

wherein the response message includes an access token for the edge computing service based on the AKMA key ID.

9. The method of claim 8 , wherein the AKMA key is based on at least one of an authentication method based on a universal subscriber identity module (USIM) credential, an authentication method based on a user portal, an authentication method based on a credential generated using information related to the UE, or an authentication method based on transmission of a one-time password (OTP).

10. A user equipment (UE) device in a wireless communication system, the device comprising:

a transceiver; and

at least one processor connected to the transceiver,

wherein the at least one processor is configured to:

perform an authentication procedure to access the wireless communication system,

obtain an authentication and key management for application (AKMA) key for an edge computing service based on the authentication procedure,

transmit, to a server, a request message for requesting authorization for the edge computing service, wherein the request message includes an AKMA key identifier (ID) corresponding to the AKMA key,

receive, from the server, a response message indicating authority granted to the edge computing service, wherein the response message includes an access token for the edge computing service based on the AKMA key ID, and

use the edge computing service corresponding to the access token.

11. The device of claim 10 , wherein the authentication procedure is performed based on at least one of an authentication method based on a universal subscriber identity module (USIM) credential, an authentication method based on a user portal, an authentication method based on a credential generated using information related to the UE, or an authentication method based on transmission of a one-time password (OTP).

12. The device of claim 10 , wherein, when the authentication procedure is performed based on a universal subscriber identity module (USIM) credential, the at least one processor is further configured to:

receive, from the server, a message including random number information and an authentication token necessary for the UE to perform an authentication procedure; and

identify whether or not the authentication token in the received message matches an authentication token generated by the UE.

13. The device of claim 10 ,

wherein, when the authentication procedure is performed using a user portal, the at least one processor is further configured to:

display a screen for inputting authentication credential information, based on a message for inputting the authentication credential information received from the server,

detect an input of the authentication credential information, and

transmit the authentication credential information to the server, and

wherein the authentication credential information comprises at least one of a user identification (ID) or a password.

14. The device of claim 10 , wherein, when the authentication procedure is performed based on a credential generated using information related to the UE, the at least one processor is further configured to:

receive, from the server, a request message comprising random number information generated by the server;

generate a message authentication code (MAC), based on at least one piece of the random number information included in the received request message or the information related to the UE;

transmit a response message including the MAC to the server; and

receive the authentication code from the server, based on verification of the MAC included in the response message.

15. The device of claim 10 , wherein, when the authentication procedure is performed based on a transmission of a one-time password (OTP), the at least one processor is further configured to:

receive an OTP from the server;

receive, from the server, a request message comprising random number information generated by the server;

generate a message authentication code (MAC), based on at least one piece of the random number information included in the received request message, a value of the received OTP, or the information related to the UE;

transmit a response message including the MAC to the server; and

receive the authentication code from the server, based on verification of the MAC included in the response message.

16. The device of claim 10 , wherein the access token is encrypted based on the AKMA ID.