Back to results
US 11,695,563 B2Granted
Methods, systems, and computer readable media for single-use authentication messages
AssigneeOracle International Corporation
InventorsJay Rajput, Virendra Singh, John Nirmal Mohan Raj
Life of this patent
Estimating the term…
Abstract
A method for creating single-use authentication messages includes creating, at a consumer network function of a core network of a telecommunications network, a message hash of at least a subset of a request message. The method includes adding, at the consumer network function, the message hash to a client credentials assertion (CCA) token for the consumer network function. The method includes sending, from the consumer network function, the request message with the CCA token to a producer network function.
Claims14
A method comprising:
- A method for creating single-use authentication messages, the method comprising:
- creating, at a consumer network function of a core network of a telecommunications network, a message hash of at least a subset of a request message, wherein creating the message hash comprises using one or more portions of the request message that are specified to not be modified by proxies of the telecommunications network, and wherein the one or more portions of the request message that are specified to not be modified by proxies of the telecommunications network include an authority header of the request message;
- adding, at the consumer network function, the message hash to a client credentials assertion (CCA) token for the consumer network function;
- sending, from the consumer network function, the request message with the CCA token to a producer network function;
- and
- enabling or disabling single-use authentication messages on a per-interface basis for a plurality of different interfaces of the network core, wherein enabling or disabling single use authentication messages comprises receiving operator input specifying enabling single use authentication messages for a first plurality of interfaces and disabling single use authentication messages for at least one other interface.
3 more elements
A system for creating single-use authentication messages, the system comprising:
- at least one processor and a memory;
- and
- a consumer network function of a core network of a telecommunications network, the consumer network function implemented by the at least one processor and configured for:
- creating a message hash of at least a subset of a request message, wherein creating the message hash comprises using one or more portions of the request message that are specified to not be modified by proxies of the telecommunications network, and wherein the one or more portions of the request message that are specified to not be modified by proxies of the telecommunications network include an authority header of the request message;
- adding the message hash to a client credentials assertion (CCA) token for the consumer network function;
- sending the request message with the CCA token to a producer network function;
- and
- enabling or disabling single-use authentication messages on a per-interface basis for a plurality of different interfaces of the network core, wherein enabling or disabling single use authentication messages comprises receiving operator input specifying enabling single use authentication messages for a first plurality of interfaces and disabling single use authentication messages for at least one other interface.
5 more elements
A non-transitory computer readable medium having stored thereon executable instructions that when executed by a processor of a computer control the computer to perform steps comprising:
- creating, at a consumer network function of a core network of a telecommunications network, a message hash of at least a subset of a request message, wherein creating the message hash comprises using one or more portions of the request message that are specified to not be modified by proxies of the telecommunications network, and wherein the one or more portions of the request message that are specified to not be modified by proxies of the telecommunications network include an authority header of the request message;
- adding, at the consumer network function, the message hash to a client credentials assertion (CCA) token for the consumer network function;
- sending, from the consumer network function, the request message with the CCA token to a producer network function;
- and
- enabling or disabling single-use authentication messages on a per-interface basis for a plurality of different interfaces of the network core, wherein enabling or disabling single use authentication messages comprises receiving operator input specifying enabling single use authentication messages for a first plurality of interfaces and disabling single use authentication messages for at least one other interface.
2 more elements
Dependencies are inferred from the claim text.