HSS-based application authorization for machine-type-communications

1. A method, comprising:

storing, by a first network device in a core network, a subscriber profile for a machine-type communication (MTC) device, the subscriber profile including application server (AS) configuration information designating application servers that are authorized to connect with the MTC device;

receiving, by a second network device in the core network, a non-Internet Protocol (IP) data delivery (NIDD) registration request from an application server, wherein the NIDD registration request includes an external identifier for the MTC device;

forwarding, by the second network device to the first network device, the NIDD registration request;

forwarding, by the first network device to the second network device and in response to the NIDD registration request, the AS configuration information;

caching, by the second network device, the AS configuration information;

detecting, by the first network device, a change to the AS configuration information;

sending, by the first network device and to the second network device, a trigger message to update the cached AS configuration information in response to the detecting;

obtaining, by the second network device and from the application server, a first identifier for the application server;

determining, by the second network device and based on the cached AS configuration information, if there is a match between the AS configuration information and the first identifier for the application server; and

configuring a binding, by the second network device, of the application server and an access point name (APN) for the MTC device, in response to determining that there is a match.

2. The method of claim 1 , wherein the first network device includes a home subscriber server (HSS) device of an evolved packet core network and the second network device includes a service capability exposure function (SCEF) device of the evolved packet core network, the method further comprising:

permitting communications between the application server and the MTC device after configuring the binding.

3. The method of claim 2 , wherein the subscriber profile is stored in a local memory of the HSS device.

4. The method of claim 1 , wherein forwarding the AS configuration information further comprises:

forwarding, via a NIDD authorization response, a list of allowed AS identifiers for the APN for the MTC device.

5. The method of claim 1 , wherein forwarding the AS configuration information further comprises:

forwarding, via a NIDD authorization response, a list of allowed AS identifiers for multiple APNs associated with the MTC device.

6. The method of claim 1 , wherein the AS configuration information further includes the APN associated with the MTC device.

7. The method of claim 1 , wherein the first identifier is included within a security certificate for the application server.

8. The method of claim 1 , further comprising:

receiving, by the second network device, a connection request from a mobility management entity (MME) device associated with the MTC device; and

matching, by the second network device, the application server to the APN for the MTC device.

9. The method of claim 1 , further comprising:

receiving, by the second network device and after configuring the binding, uplink data from the MTC device; and

authorizing, by the second network device and based on the binding, forwarding of the uplink data to the application server.

10. The method of claim 1 , further comprising:

receiving, by the second network device and after configuring the binding, downlink data from the application server; and

authorizing, by the second network device and based on the binding, forwarding of the downlink data to toward the MTC device.

11. A system comprising:

a first network device in a core network, including:

one or more first memories to store first instructions; and

one or more first processors to execute the first instructions to:

store a subscriber profile for a machine-type communication (MTC) device, the subscriber profile including application server (AS) configuration information designating application servers that are authorized to connect with the MTC device;

forward, to a second network device in the core network and in response to a non-IP data delivery (NIDD) registration request, the AS configuration information;

detect a change to the AS configuration information; and

send, to the second network device, a trigger message to update the AS configuration information in response to the detecting; and

the second network device, including:

one or more second memories to store second instructions; and

one or more second processors to execute the second instructions to:

receive the NIDD registration request from an application server, wherein the NIDD registration request includes an external identifier for the MTC device;

forward, to the first network device, the NIDD registration request;

cache the AS configuration information;

obtain, from the application server, a first identifier for the application server;

determine, based on the cached AS configuration information, if there is a match between the AS configuration information and the first identifier for the application server; and

configure a binding of the application server and an access point name (APN) for the MTC device, in response to determining that there is a match.

12. The system of claim 11 , wherein the first network device includes a home subscriber server (HSS) device and the second network device includes a service capability exposure function (SCEF) device.

13. The system of claim 12 , wherein the subscriber profile is stored in a local memory of the HSS device.

14. The system of claim 11 , wherein, when forwarding the AS configuration information, the one or more first processors are further to execute the instructions to:

forward, via a NIDD authorization response, a list of allowed AS identifiers for the APN for the MTC device.

15. The system of claim 11 , wherein, when forwarding the AS configuration information, the one or more first processors are further to execute the instructions to:

forward, via a NIDD authorization response, a list of allowed AS identifiers for multiple APNs associated with the MTC device.

16. The system of claim 11 , wherein the AS configuration information further includes the APN associated with the MTC device.

17. The system of claim 11 , wherein the first identifier is included within a security certificate for the application server.

18. The system of claim 11 , wherein the one or more first processors are further to execute the first instructions to:

receive a connection request from a mobility management entity (MME) device associated with the MTC device; and

match the application server to the APN for the MTC device.

19. A non-transitory computer-readable medium containing instructions executable by at least one processor, the computer-readable medium comprising one or more instructions to:

store, by a first network device of a core network, a subscriber profile for a machine-type communication (MTC) device, the subscriber profile including application server (AS) configuration information designating application servers that are authorized to connect with the MTC device;

receive, by a second network device of the core network, a non-IP data delivery (NIDD) registration request from an application server, wherein the NIDD registration request includes an identifier for the MTC device;

forward, by the second network device to the first network device, the NIDD registration request;

forward, by the first network device to the second network device and in response to the NIDD registration request, the AS configuration information;

cache, by the second network device, the AS configuration information;

detect, by the first network device, a change to the AS configuration information;

send, by the first network device and to the second network device, a trigger message to update the cached AS configuration information in response to the detecting;

obtain, from the application server, a first identifier for the application server;

determine, based on the cached AS configuration information, if there is a match between the AS configuration information and the first identifier for the application server; and

configure a binding of the application server and an access point name (APN) for the MTC device, in response to determining that there is a match.

20. The non-transitory computer-readable medium claim 19 , further comprising one or more instructions to:

receive after configuring the binding, uplink data from the MTC device; and

authorize, based on the binding, forwarding of the uplink data to the application server.