Towards robust notification mechanism in 5G SBA
Embodiments of a method in a core network, corresponding embodiments of methods in a service consumer and service producer, and corresponding embodiments of a service consumer and service producer are disclosed. In some embodiments, a method in a core network comprises, at a service consumer, generating security information for a subscription to an event and sending a subscribe message comprising the security information to a service producer of the event. The method further comprises, at the service producer, receiving the subscribe message and sending a notification message to the service consumer, where the notification message comprises the event and either: the security information or information derived from the security information. The method further comprises, at the service consumer, receiving the notification message and verifying the notification message based on the security information or the information derived from the security information, comprised in the notification message.
1. A method for subscription and notification of events in a core network of a cellular communications system in which the core network has a service-based architecture, the method comprising:
at a service consumer in the core network:
generating security information for a subscription to an event; and
sending a subscribe message comprising the security information to a service producer in the core network, the service producer being a service producer of the event;
at the service producer:
receiving the subscribe message comprising the security information from the service consumer; and
sending a notification message to the service consumer, the notification message comprising the event and either: the security information or information derived from the security information; and
at the service consumer:
receiving the notification message from the service producer; and
verifying the notification message based on:
the security information or the information derived from the security information, comprised in the notification message; and
the security information generated at the service consumer.
2. A method performed by a service consumer for subscription and notification of events in a core network of a cellular communications system in which the core network has a service-based architecture, the method comprising:
generating first security information for a subscription to an event;
sending a subscribe message to a service producer of the event, the subscribe message comprising the first security information;
receiving a notification message from the service producer, the notification message comprising the event and second security information, the second security information comprising the first security information or information derived from the first security information; and
verifying the notification message based on the first security information generated at the service consumer and the second security information comprised in the notification message.
3. The method of claim 2 wherein the first security information comprises a security key, and the second security information comprises information derived from the security key.
4. The method of claim 2 wherein the first security information comprises a token, and the second security information comprises the token.
5. The method of claim 2 wherein the subscribe message further comprises:
information that identifies the service consumer; or
information that identifies a data storage component of the service consumer.
6. The method of claim 2 wherein the subscribe message further comprises:
a Fully Qualified Domain Name, FQDN, of the service consumer, a Uniform Resource Locator, URL, of the service consumer, or an Internet Protocol, IP, address of the service consumer; or
a FQDN of a data storage component of the service consumer, a URL of the data storage component of the service consumer, or an IP address of the data storage component of the service consumer.
7. The method of claim 2 wherein the subscribe message further comprises a notification identifier, ID, and the notification message comprises the notification ID.
8. The method of claim 2 further comprising receiving a subscription accept message in response to the subscribe message, the subscription accept message comprising a subscription ID.
9. The method of claim 2 wherein:
the service consumer comprises a data storage component and a consumer component that consumes the event; and
receiving the notification message from the service producer comprises receiving the notification message at the data storage component.
10. The method of claim 9 wherein verifying the notification message comprises verifying the notification message at the data storage component.
11. The method of claim 10 further comprising communicating the event from the data storage component to the consumer component of the service consumer.
12. The method of claim 2 further comprising:
deciding to unsubscribe from the event; and
sending an unsubscribe message to either the service producer that sent a last notification message for the event or a service producer that sends a next notification message for the event.
13. The method of claim 12 wherein the unsubscribe message comprises third security information, the third security information being information derived from the first security information.
14. The method of claim 12 further comprising:
receiving third security information from the service producer;
wherein the unsubscribe message comprises the third security information.
15. A service consumer for subscription and notification of events in a core network of a cellular communications system in which the core network has a service-based architecture, the service consumer adapted to:
generate first security information for a subscription to an event;
send a subscribe message to a service producer of the event, the subscribe message comprising the first security information;
receive a notification message from the service producer, the notification message comprising the event and second security information, the second security information comprising the first security information or information derived from the first security information; and
verify the notification message based on the first security information generated at the service consumer and the second security information comprised in the notification message.
16. The service consumer of claim 15 wherein the service consumer comprises:
a network node that implements a network function that comprises the service consumer, wherein the network node comprises:
a network interface; and
processing circuitry associated with the network interface, the processing circuitry configured to cause the network node to implement the network function such that the service consumer is adapted to:
generate the first security information for the subscription to the event;
send the subscribe message to the service producer of the event, the subscribe message comprising the first security information;
receive the notification message from the service producer, the notification message comprising the event and the second security information, the second security information comprising the first security information or information derived from the first security information; and
verify the notification message based on the first security information generated at the service consumer and the second security information comprised in the notification message.
17. The service consumer of claim 15 wherein the service consumer comprises:
one or more network nodes that implement a service consumer, the service consumer comprising a data storage component and a consumer component, wherein each network node of the one or more network nodes comprises:
a network interface; and
processing circuitry associated with the network interface;
wherein the processing circuitry of the one or more network nodes is configured to cause the one or more network nodes to implement the service consumer such that:
the consumer component of the service consumer is adapted to:
generate the first security information for the subscription to the event; and
send the subscribe message to the service producer of the event, the subscribe message comprising the first security information; and
the data storage component of the service consumer is adapted to:
receive the notification message from the service producer, the notification message comprising the event and the second security information, the second security information comprising the first security information or information derived from the first security information;
verify the notification message based on the first security information generated at the service consumer and the second security information comprised in the notification message; and
communicate the event to the consumer component of the service consumer.
18. A method performed by a service producer for subscription and notification of events in a core network of a cellular communications system in which the core network has a service-based architecture, the method comprising:
receiving a subscribe message from a service consumer for a subscription to an event, the subscribe message comprising first security information for the subscription to the event;
storing the first security information in a subscription context for the subscription to the event by the service consumer; and
sending a notification message to the service consumer, the notification message comprising the event and second security information, the second security information comprising the first security information or information derived from the first security information.
19. A service producer for subscription and notification of events in a core network of a cellular communications system in which the core network has a service-based architecture, the service producer adapted to:
receive a subscribe message from a service consumer for a subscription to an event, the subscribe message comprising first security information for the subscription to the event;
store the first security information in a subscription context for the subscription to the event by the service consumer; and
send a notification message to the service consumer, the notification message comprising the event and second security information, the second security information comprising the first security information or information derived from the first security information.
20. The service producer of claim 19 wherein the service producer comprises:
a network node that implements a network function that comprises the service producer, wherein the network node comprises:
a network interface; and
processing circuitry associated with the network interface, the processing circuitry configured to cause the network node to implement the network function such that the service producer is adapted to:
receive the subscribe message from the service consumer for the subscription to the event, the subscribe message comprising the first security information for the subscription to the event;
store the first security information in the subscription context for the subscription to the event by the service consumer; and
send the notification message to the service consumer, the notification message comprising the event and the second security information, the second security information comprising the first security information or information derived from the first security information.