Method for service subscription resource-based authentication in wireless communication system
The present invention relates to a method for authorizing a specific operation of a specific resource in a wireless communication system, and comprises receiving, from a requesting M2M device, a request for a specific operation of a specific resource, the operation request including an identifier of the requesting M2M device and the identifier being associated with an M2M service subscription resource derived using a credential of the requesting M2M device; searching the M2M service subscription resource using the identifier, and determining whether the requesting M2M device is authorized for a type of the specific resource using the M2M service subscription resource.
1. A method of authorizing, by an M2M device, a request for a specific operation of a first resource in a wireless communication system, comprising:
identifying an M2M service subscription resource of a requesting M2M device using a credential of the requesting M2M device;
receiving a registration request from the requesting M2M device;
allocating an identifier of the requesting M2M device when the registration request does not include the identifier of the requesting M2M device;
transmitting, to an M2M server, an inclusion request for including the identifier of the requesting M2M device, included in the registration request, or the allocated identifier of the requesting M2M device into the identified M2M service subscription resource;
receiving, from the requesting M2M device, an operation request for the specific operation of the first resource,
wherein the operation request includes the identifier of the requesting M2M device, the identifier being associated with the identified M2M service subscription resource;
searching the identified M2M service subscription resource using the identifier, and determining whether the requesting M2M device is authorized for a type of the first resource using the M2M service subscription resource;
determining whether the requesting M2M device is authorized for the specific operation of the first resource, by using an access control policy resource for the first resource, when the requesting M2M device is determined to be authorized for the type of the first resource; and
executing the specific operation of the first resource when the requesting M2M device is determined to be authorized for the specific operation of the first resource.
2. The method according to claim 1 , wherein the determining of whether the requesting M2M device is authorized for the type of the first resource comprises determining that the requesting M2M device is authorized for the type of the first resource, when a plurality of M2M service subscription resources are searched and the requesting M2M device is determined to be authorized for the type of the first resource using one of the plurality of M2M service subscription resources.
3. The method according to claim 1 , wherein the access control policy resource for the first resource is indicated by a predetermined attribute of the first resource.
4. The method according to claim 1 , wherein the M2M service subscription resource includes IDs of service roles subscribed to the M2M service subscription resource and has a child resource storing identifiers of nodes or devices to which the M2M service subscription resource is applied.
5. An M2M device configured to authorize a request for a specific operation of a first resource in a wireless communication system, comprising:
a receiver and a transmitter; and
a processor device that controls the receiver and the transmitter, wherein the processor device:
identifies an M2M service subscription resource of a requesting M2M device using a credential of the requesting M2M device,
controls the receiver to receive a registration request from the requesting M2M device,
allocates an identifier of the requesting M2M device when the registration request does not include the identifier of the requesting M2M device,
controls the transmitter to transmit, to an M2M server, an inclusion request for including the identifier of the requesting M2M device, included in the registration request, or the allocated identifier of the requesting M2M device into the identified M2M service subscription resource,
controls the receiver to receive, from the requesting M2M device, a request for the specific operation of the first resource, wherein the operation request includes the identifier of the requesting M2M device, the identifier is associated with the identified M2M service subscription resource;
searches the identified M2M service subscription resource using the identifier and determine whether the requesting M2M device is authorized for a type of the first resource using the M2M service subscription resource;
determines whether the requesting M2M device is authorized for the specific operation of the first resource, by using an access control policy resource for the first resource, when the requesting M2M device is determined to be authorized for the type of the first resource; and
executes the specific operation of the first resource when the requesting M2M device is determined to be authorized for the specific operation of the first resource.
6. The M2M device according to claim 5 , wherein the processor is configured to determine that the requesting M2M device is authorized for the type of the first resource, when a plurality of M2M service subscription resources are searched and the requesting M2M device is determined to be authorized for the type of the first resource using one of the plurality of M2M service subscription resources.
7. The M2M device according to claim 5 , wherein the access control policy resource for the first resource is indicated by a predetermined attribute of the first resource.
8. The M2M device according to claim 5 , wherein the M2M service subscription resource includes IDs of service roles subscribed to the M2M service subscription resource and has a child resource storing identifiers of nodes or devices to which the M2M service subscription resource is applied.